@!@
if configRegistry.is_true('auth/faillog', False):
    if configRegistry.is_true('auth/faillog/lock_global', False):
        print('auth	[success=1 user_unknown=1 default=bad]	pam_faillock.so preauth')
        print('auth	[default=die]	pam_runasroot.so program=/usr/lib/univention-pam/lock-user')
    else:
        print('auth	required	pam_faillock.so preauth')
@!@

@!@
if configRegistry.is_true('auth/faillog', False):
    print('account	required	pam_faillock.so')
@!@
