auth [default=ignore ignore=6 success=6]                pam_localuser.so
auth [default=1 success=ignore]                         pam_succeed_if.so user ingroup jc_net_pin
auth [default=die success=3]                            pam_jc_sss.so pwd_group=jc_net_pass cert_group=jc_net_pin
auth [default=1 success=ignore]                         pam_succeed_if.so user ingroup jc_net_pass
auth [default=die success=1]                            pam_jc_sss.so pwd_group=jc_net_pass cert_group=jc_net_pin
auth [default=die success=ok]                           pam_sss.so forward_pass
auth [default=die success=done]                         pam_jc_otp.so
