PAM_NTLM

[Marcel Garcia Will]

I have installed the NTLM support in my system, I cannot make it works the way I want.
I want to allow user login using only the NT service, except for root, who can login using the UNIX service. In theory, the configuration of pam.conf which works fine for what I want is:

login auth sufficient libpam_ntlm.1 debug
login auth required libpam_updbe.1 debug

the pam_user.conf file have the following line:

root auth libpam_unix.1 try_first_pass

I??ve tried all combinations [sufficient | required | optional] that was possible, but it seems do not execute the line

login auth required libpam_updbe.1 debug

Using this configuration, if I enter hit enter after entering the username, I log into the system, not being prompted for a password.
What am I doing wrong?