bgardner@vesta : ~ $ cat /etc/pam.d/su
account sufficient /gnu/store/9ljwyrd45q1i0i1hl6rqadr35d33b9wx-nss-pam-ldapd-0.9.10/lib/security/pam_ldap.so 
account required pam_unix.so 
auth sufficient /gnu/store/9ljwyrd45q1i0i1hl6rqadr35d33b9wx-nss-pam-ldapd-0.9.10/lib/security/pam_ldap.so 
auth sufficient pam_rootok.so 
auth required pam_unix.so 
password required pam_unix.so sha512 shadow
session required /gnu/store/90b3ypy5w6si4vd4b17i2nyzy0pfr5j2-elogind-241.3/lib/security/pam_elogind.so 
session sufficient /gnu/store/9ljwyrd45q1i0i1hl6rqadr35d33b9wx-nss-pam-ldapd-0.9.10/lib/security/pam_ldap.so 
session required pam_env.so 
session required pam_unix.so

Add a code snippet to your website: www.paste.org