# /etc/pam.d/common-auth
auth     required    pam_mount.so
auth     sufficient  /lib/security/pam_lwidentity.so
auth     requisite   pam_unix.so nullok_secure try_first_pass
auth     optional    pam_smbpass.so migrate missingok

# /etc/pam.d/common-session
session  optional   pam_mount.so
auth     sufficient /lib/security/pam_lwidentity.so
session  required   pam_unix.so