In fact, the source says: /* We don't actually care if the account modules fail or succeed, * but we need to run them anyway because certain pam modules * depend on side effects of the account modules getting run. */
Looks like this decision was done using wrong assumptions. Not being familiar with libpam, I won't risk to propose a patch, but will be glad to test one. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org