auth    sufficient      pam_succeed_if.so user ingroup nopasswdlogin
auth	[success=2 default=ignore]	pam_lsass.so
auth	[success=1 default=ignore]	pam_unix.so nullok_secure try_first_pass
auth	requisite	pam_deny.so
auth	required	pam_permit.so
