Pam debian 11 ldap

common-auth

auth    required     pam_group.so use_first_pass
auth	[success=2 default=ignore]	pam_unix.so nullok
auth	[success=1 default=ignore]	pam_ldap.so use_first_pass
auth	requisite			pam_deny.so
auth	required			pam_permit.so

common-account

account	[success=2 new_authtok_reqd=done default=ignore]	pam_unix.so 
account	[success=1 default=ignore]	pam_ldap.so 
account	requisite			pam_deny.so
account	required			pam_permit.so

common-password

password	[success=2 default=ignore]	pam_unix.so obscure yescrypt
password	[success=1 user_unknown=ignore default=die]	pam_ldap.so  try_first_pass
password	requisite			pam_deny.so
password	required			pam_permit.so

common-session

session	[default=1]			pam_permit.so
session	requisite			pam_deny.so
session	required			pam_permit.so
session required pam_mkhomedir.so  skel=/etc/skel umask=0022 
session	required	pam_unix.so 
session	optional			pam_ldap.so 
session	optional	pam_systemd.so