--- pam-kubuntu/lightdm	2014-04-15 12:23:07.364442331 +0200
+++ pam-ucc/lightdm	2014-04-15 12:23:37.252443584 +0200
@@ -1,16 +1,37 @@
-#%PAM-1.0
-auth    requisite       pam_nologin.so
-auth    sufficient      pam_succeed_if.so user ingroup nopasswdlogin
+# Warning: This file is auto-generated and might be overwritten by
+#          univention-config-registry.
+#          Please edit the following file(s) instead:
+# Warnung: Diese Datei wurde automatisch generiert und kann durch
+#          univention-config-registry überschrieben werden.
+#          Bitte bearbeiten Sie an Stelle dessen die folgende(n) Datei(en):
+# 
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/01univention-lightdm-head
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/10univention-lightdm-auth
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/15univention-lightdm-common-auth
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/17univention-pam-mount
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/20univention-lightdm-auth
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/25univention-lightdm-common-account
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/30univention-lightdm-session
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/34univention-pam-mount
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/35univention-lightdm-common-session
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/40univention-lightdm-session
+# 	/etc/univention/templates/files/etc/pam.d/lightdm.d/45univention-lightdm-common-password
+# 
+auth requisite  pam_nologin.so
+auth required   pam_env.so readenv=1
+auth required   pam_env.so readenv=1 envfile=/etc/default/locale
+auth sufficient pam_succeed_if.so user ingroup nopasswdlogin
 @include common-auth
-auth    optional        pam_gnome_keyring.so
-auth    optional        pam_kwallet.so
+auth optional pam_mount.so
+auth required pam_runasroot.so save_pass
+auth optional pam_gnome_keyring.so
 @include common-account
 session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
-session required        pam_limits.so
+session required pam_runasroot.so export_pass program=/usr/bin/univention-lightdm-save-pass
+session required pam_limits.so
+session optional pam_runasroot.so program=/usr/sbin/univention-ucc-fetch-user-policies
+session optional pam_mount.so
 @include common-session
 session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
-session optional        pam_gnome_keyring.so auto_start
-session optional        pam_kwallet.so auto_start
-session required        pam_env.so readenv=1
-session required        pam_env.so readenv=1 user_readenv=1 envfile=/etc/default/locale
+session optional pam_gnome_keyring.so auto_start
 @include common-password