--- a/etc/pam.d/system-auth 2024-08-15 10:00:08.000000000 +0200 +++ b/etc/pam.d/system-auth 2024-12-16 12:33:39.096773722 +0100 @@ -3,7 +3,6 @@ auth required pam_faillock.so preauth # Optionally use requisite above if you do not want to prompt for the password # on locked accounts. --auth [success=2 default=ignore] pam_systemd_home.so auth [success=1 default=bad] pam_unix.so try_first_pass nullok auth [default=die] pam_faillock.so authfail auth optional pam_permit.so @@ -12,16 +11,13 @@ # If you drop the above call to pam_faillock.so the lock will be done also # on non-consecutive authentication failures. --account [success=1 default=ignore] pam_systemd_home.so account required pam_unix.so account optional pam_permit.so account required pam_time.so --password [success=1 default=ignore] pam_systemd_home.so password required pam_unix.so try_first_pass nullok shadow password optional pam_permit.so --session optional pam_systemd_home.so session required pam_limits.so session required pam_unix.so session optional pam_permit.so