#!/bin/bash
main () {
	setup_var
	setup_ucr unix
	gen_common

	check account '[success=done new_authtok_reqd=done acct_expired=bad default=ignore]' pam_unix.so

	check auth 'requisite' pam_nologin.so
	check auth 'required' pam_unix.so
	check auth 'required' pam_env.so

	check session 'required' pam_unix.so
	check session 'required' pam_limits.so

	check password 'requisite' pam_pwquality.so
	check password '[success=1 default=ignore]' pam_unix.so 'obscure sha512 try_first_pass use_authtok'
	check password 'requisite' pam_deny.so
	check password 'required' pam_permit.so
}
. "${0%/*}/common.sh" || exit 1
