--- /etc/pam.d/xapi
+++ /etc/pam.d/xapi
@@ -1,4 +1,5 @@
 #%PAM-1.0
-auth       include     common-auth
-account    include     common-auth
-password   include     common-auth
+
+auth sufficient pam_succeed_if.so user ingroup root
+#Uncomment to allow group 'xapi' to authenticate. You must create this group manually!
+#auth sufficient pam_succeed_if.so user ingroup xapi