# ::maintainer::
#
# /etc/pam.d/common-password - password-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define  the services to be
#used to change user passwords.  The default is pam_unix

#ubuntu version
#password [success=1 default=ignore]	pam_unix.so try_first_pass nullok obscure min=4 max=8 md5
#password required			pam_ldap.so
#password required			pam_permit.so

#devuan version
#password sufficient	pam_unix.so md5 obscure min=4 max=8 nullok try_first_pass
#password sufficient	pam_ldap.so
#password required	pam_deny.so

password [success=1 default=ignore]	pam_unix.so try_first_pass nullok obscure min=4 max=8 md5
password required			pam_ldap.so
password required			pam_permit.so

