{% calculate comment='#', chmod='644', chown='root:root' %}
auth       required     pam_env.so
auth       required     pam_unix.so try_first_pass

account    required     pam_unix.so

{% if pkg('sys-libs/pam') >= '1.4' %}
password   required     pam_passwdqc.so min=8,8,8,8,8 retry=3
{% else %}
password   required     pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
{% endif %}
password   sufficient   pam_unix.so nullok sha256 shadow use_authtok
password   required     pam_deny.so

session    required     pam_limits.so
{% if pkg('sys-auth/elogind') %}
-session   optional     pam_loginuid.so
-session   optional     pam_elogind.so
{% endif %}
session    required     pam_unix.so