[twitch_sss]
nss_group=group:          compat sss
nss_netgroup=netgroup:       files
nss_passwd=passwd:         compat sss
nss_shadow=shadow:         compat sss
pam_account=account required pam_access.so
        account	[success=2 new_authtok_reqd=done default=ignore]	pam_unix.so
	account	requisite			pam_deny.so
	account	required			pam_permit.so
	account	sufficient			pam_localuser.so 
	account	[default=bad success=ok user_unknown=ignore]	pam_sss.so
pam_auth=auth	[success=2 default=ignore]	pam_unix.so nullok_secure
	auth	[success=1 default=ignore]	pam_sss.so use_first_pass
	auth	requisite			pam_deny.so
	auth	required			pam_permit.so
pam_password=password	requisite			pam_pwquality.so retry=3
	password	[success=2 default=ignore]	pam_unix.so obscure use_authtok try_first_pass sha512
	password	sufficient			pam_sss.so use_authtok
	password	requisite			pam_deny.so
	password	required			pam_permit.so
pam_session=session	[default=1]			pam_permit.so
	session	requisite			pam_deny.so
	session	required			pam_permit.so
	session optional			pam_umask.so
	session	required			pam_mkhomedir.so umask=0022 skel=/etc/skel
	session	required	pam_unix.so 
	session	optional			pam_sss.so 
