Name: SSS authentication
Default: yes
Priority: 128

Auth-Type: Primary
Auth:
        [success=end default=ignore]    pam_sss.so forward_pass
Auth-Initial:
        [success=end default=ignore]    pam_sss.so forward_pass
Account-Type: Additional
Account:
        [success=1 default=ignore]                     pam_localuser.so
        [default=bad success=ok user_unknown=ignore]    pam_sss.so
Session-Type: Additional
Session-Interactive-Only: yes
Session:
        optional                        pam_sss.so
Password-Type: Primary
Password:
        sufficient                      pam_sss.so
Password-Initial:
        sufficient                      pam_sss.so
