# Baserock customized /etc/pam.d/gdm-password
#
# This configuration ensures that the default keyring
# is unlocked at gdm login time, and also that the
# authentication token is used to update the keyring
# when the password is set.

auth     requisite      pam_nologin.so
auth     required       pam_env.so

auth     required       pam_succeed_if.so uid >= 1000 quiet
auth     substack       system-auth
auth     optional       pam_gnome_keyring.so

account  include        system-auth
password substack       system-auth
password optional       pam_gnome_keyring.so use_authtok

session  required       pam_limits.so
session  required       pam_loginuid.so
session  optional       pam_keyinit.so force revoke
session  required       pam_namespace.so
session  substack       system-auth
session  optional       pam_gnome_keyring.so auto_start