# su: auth account session
auth       sufficient     pam_rootok.so 
auth       required       pam_wheel.so use_uid group=admin group=wheel
auth       sufficient     pam_securityserver.so
auth       sufficient     pam_unix.so
auth       required       pam_deny.so
account    required       pam_permit.so
password   required       pam_netinfo.so
session    required       pam_permit.so