# mirrors system-auth / system(-local)-login
# except for the authentication method, which is:
# smartcard login

auth        required    pam_env.so
auth        required    pam_tally.so file=/var/log/faillog onerr=succeed
auth        required    pam_shells.so
auth        required    pam_nologin.so
auth [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card card_only
-auth       optional    pam_gnome_keyring.so

account     include     system-local-login

password    include     system-local-login

session     include     system-local-login
-session    optional    pam_gnome_keyring.so auto_start