@!@
# search for UMC auth addons
auth_umc_addons = any(
	configRegistry.is_true(k, True)
	for k in configRegistry.keys()
	if k.startswith('auth/umc/addon/') and k.count('/') == 3
)

methods = configRegistry.get('auth/methods', '').split(' ')

if auth_umc_addons:
	if 'krb5' in methods:
		print('auth     [success=2 new_authtok_reqd=2 default=ignore]                         pam_unix.so try_first_pass')
		print('auth     [success=1 new_authtok_reqd=1 default=ignore]                         pam_krb5.so use_first_pass defer_pwchange')
	else:
		print('auth     [success=1 new_authtok_reqd=1 default=ignore]                         pam_unix.so')
	print('auth     [success=ok new_authtok_reqd=ok default=die]                         pam_ldap.so use_first_pass')
else:
	print('auth     sufficient                         pam_unix.so try_first_pass')
	if 'krb5' in methods:
		print('auth     sufficient                         pam_krb5.so use_first_pass defer_pwchange')
	print('auth     sufficient                           pam_ldap.so use_first_pass')@!@
