...
                auth      required        pam_env.so
                auth      sufficient      pam_unix2.so
            +++ auth      required        pam_winbind.so  use_first_pass
                account   requisite       pam_unix2.so
            +++ account   required        pam_winbind.so  use_first_pass
            +++ password  sufficient      pam_winbind.so
                password  requisite       pam_pwcheck.so  cracklib
                password  required        pam_unix2.so    use_authtok
                session   required        pam_unix2.so
            +++ session   required        pam_winbind.so
                ...