#%PAM-1.0
auth	sufficient pam_ldap.so use_first_pass
auth     required	pam_tcb.so shadow fork prefix=$2a$ count=8 nullok use_first_pass
password sufficient pam_ldap.so use_first_pass
password required	pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 nullok write_to=tcb
