auth       required    pam_dcvgraphicalsso.so legacy_cba
-auth      optional    pam_canonicalize_user.so
account    required    pam_dcvgraphicalsso.so legacy_cba
session    include     common-session
