#%PAM-1.0
# Used by the COSMIC screen locker (cosmic-greeter running in the user
# session).  The binary is setgid chkpwd, which is enough for pam_tcb
# to verify the password, but not to read the shadow entry needed by
# pam_tcb account management, hence pam_permit for the account phase.
auth		include		system-auth
-auth		optional	pam_gnome_keyring.so
account		required	pam_permit.so
password	required	pam_deny.so
session		required	pam_deny.so
