# This file is part of systemd.
-auth sufficient pam_unix.so nullok try_first_pass
-
-account required pam_nologin.so
-account sufficient pam_unix.so
-
-password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok
-
--session optional pam_loginuid.so
--session optional pam_systemd.so
-session required pam_limits.so
-session sufficient pam_unix.so
+auth include system-auth
+account include system-auth
+password include system-auth
+session include system-auth
--- /dev/null
+# This file is part of systemd.
+
+auth sufficient pam_unix.so nullok try_first_pass
+
+account required pam_nologin.so
+account sufficient pam_unix.so
+
+password sufficient pam_unix.so nullok sha512 shadow try_first_pass try_authtok
+
+-session optional pam_loginuid.so
+-session optional pam_systemd.so
+session required pam_limits.so
+session sufficient pam_unix.so
-#%PAM-1.0
+# This file is part of systemd.
+#
+# Used by systemd --user instances.
-# Used by systemd when launching systemd user instances.
-
-account include system-auth
-session include system-auth
-auth required pam_deny.so
-password required pam_deny.so
+account include system-auth
+session include system-auth