auth	required	pam_faillock.so preauth silent audit deny=3 unlock_time=600
auth	include		password-auth-ac
auth	[default=die]	pam_faillock.so authfail silent audit deny=3 unlock_time=600

account	required	pam_faillock.so
account	include		password-auth-ac

password include	password-auth-ac

session	 include	passsword-auth-ac