@!@
# search for UMC auth addons
auth_umc_addons = any(
    configRegistry.is_true(k, True)
    for k in configRegistry
    if k.startswith('auth/umc/addon/') and k.count('/') == 3
)

methods = configRegistry.get('auth/methods', '').split(' ')

if auth_umc_addons:
    if 'krb5' in methods:
        print('auth     [success=2 new_authtok_reqd=2 default=ignore]                         pam_unix.so try_first_pass')
        print('auth     [success=1 new_authtok_reqd=1 default=ignore]                         pam_krb5.so use_first_pass defer_pwchange')
    else:
        print('auth     [success=1 new_authtok_reqd=1 default=ignore]                         pam_unix.so')
    print('auth     [success=ok new_authtok_reqd=ok default=die]                         pam_ldap.so use_first_pass')
else:
    print('auth     sufficient                         pam_unix.so try_first_pass')
    if 'krb5' in methods:
        print('auth     sufficient                         pam_krb5.so use_first_pass defer_pwchange')
    print('auth     sufficient                           pam_ldap.so use_first_pass')@!@
