auth            required        pam_tally.so onerr=succeed
auth            required        pam_shells.so
auth            required        pam_nologin.so
auth            required        pam_env.so
auth            requisite       pam_unix.so try_first_pass likeauth nullok
# Without OOB
auth            required        pam_otpasswd.so retry=2
# Example with OOB
# auth            required        pam_otpasswd.so retry=2 debug oob=1 oob_path=/etc/security/otpasswd_oob.sh

session		optional	pam_otpasswd.so
