password [success=1 default=ignore]  pam_unix.so obscure sha512
password requisite                   pam_deny.so
password required                    pam_permit.so