@!@
if configRegistry.is_true("auth/faillog", False):
    if configRegistry.is_true("auth/faillog/lock_global", False):
        print(
            """
auth     [success=1 user_unknown=1 \\
         default=bad]      pam_faillock.so preauth""".strip()
        )
        print("auth     [default=die]     pam_runasroot.so program=/usr/lib/univention-pam/lock-user")
    else:
        print("auth     required          pam_faillock.so preauth")
@!@

@!@
if configRegistry.is_true("auth/faillog", False):
    print("account  required              pam_faillock.so")
@!@
