fix problems with auth

Signed-off-by: Martin Schurz <[email protected]>

roles/os_hardening/templates/etc/pam.d/rhel_auth.j2

@@ -12,8 +12,8 @@ auth        [default=1 ignore=ignore success=ok] pam_succeed_if.so uid >= 1000 q
 auth        [default=1 ignore=ignore success=ok] pam_localuser.so
 {% endif %}
 auth        sufficient    pam_unix.so nullok try_first_pass
-auth        requisite     pam_succeed_if.so uid >= 1000 quiet
 {% if (os_auth_pam_sssd_enable | bool) %}
+auth        [default=1 ignore=ignore success=ok] pam_succeed_if.so uid >= 1000 quiet
 auth        sufficient    pam_sss.so forward_pass
 {% endif %}
 {% if os_auth_retries > 0 %}