password    sufficient    pam_unix.so nullok md5 shadow
password    required      pam_deny.so

