# smtp: auth account password session with gssapi and plain fallback
auth       sufficient     pam_krb5.so try_first_pass default_principal debug
account    sufficient     pam_krb5.so
auth       required       pam_opendirectory.so
account    required       pam_nologin.so
account    required       pam_opendirectory.so
password   required       pam_opendirectory.so
