auth [default=ignore ignore=2 success=2]                pam_localuser.so
auth [default=die success=ok]                           pam_sss.so forward_pass
auth [default=die success=done]                         pam_jc_otp.so