@AliveDevil@tauri.earth
The success=1 in the first line means: if the module returns success skip one line in the stack
The required keyword in the second line can be read as [success=ok new_authtok_reqd=ok ignore=ignore default=bad]
You can find more detailed information in the man page: https://linux.die.net/man/5/pam.d