script locks user out. added the following to AC-7 sed -i 's/\[success=1 default=ignore\]\s*pam_unix.so/[success=2 default=ignore] pam_unix.so/' \ /etc/pam.d/common-auth