# /etc/pam.d/common-auth
auth required pam_mount.so
auth sufficient /lib/security/pam_lwidentity.so
auth requisite pam_unix.so nullok_secure try_first_pass
auth optional pam_smbpass.so migrate missingok
# /etc/pam.d/common-session
session optional pam_mount.so
auth sufficient /lib/security/pam_lwidentity.so
session required pam_unix.so