xoxys.pam/defaults/main.yml

---
pam_settings:
  - type: auth
    control: sufficient
    module_arguments:
      - try_first_pass
  - type: password
    control: sufficient
    module_arguments:
      - sha512
      - shadow
      - try_first_pass
      - use_authtok 

pam_settings_extra: []