Sample config and .spec file.
List the PAM authorization feature first to de-emphasise Basic Auth.
Make pam_authenticate_with_login_password available to other modules.