#%PAM-1.0
@include common-auth

# Uncomment this line to allow users of group xapi to authenticate
#auth sufficient pam_succeed_if.so user ingroup xapi

# Only allow group root to authenticate, unless above line uncommented
auth required pam_succeed_if.so user ingroup root
