auth		sufficient	pam_rootok.so
auth		include		system-auth
account		include		system-auth
password	include		system-auth

{% if gnome_keyring %}
password	optional	pam_gnome_keyring.so {{ unix_authtok }}
{% endif %}
