Name: YourDev Smartcard + Password AD authentication Default: no Priority: 128 Conflicts: sss sss-smart-card-optional sss-smart-card-required Auth-Type: Primary Auth: [success=end default=ignore] pam_sss.so use_first_pass try_cert_auth allow_missing_name Auth-Initial: [success=end default=ignore] pam_sss.so forward_pass try_cert_auth allow_missing_name Account-Type: Additional Account: sufficient pam_localuser.so [default=bad success=ok user_unknown=ignore] pam_sss.so Session-Type: Additional Session-Interactive-Only: yes Session: optional pam_sss.so Password-Type: Primary Password: sufficient pam_sss.so use_authtok Password-Initial: sufficient pam_sss.so