If you happened to find or block on pam auth in 2.3.1 here a few Details.
I ran into the same when testing.
Exhaustive debugging led me to enough data to find  and from there
With this applied until upstream settles how they want to resolve it
eventually things work much better for me.
Hope that helps on your >=2.3.1 efforts.
Software Engineer, Ubuntu Server