Chris Hofstaedtler wrote: > Debian's man page pam(7) clearly states /usr/lib/pam.d as supported. > For the record, here is trixie's version: > https://manpages.debian.org/trixie/libpam-runtime/pam.7.en.html#FILES > > | FILES > | > | /etc/pam.conf > | the configuration file > | > | /etc/pam.d > | the Linux-PAM configuration directory. Generally, if this directory is > | present, the /etc/pam.conf file is ignored. > | > | /usr/lib/pam.d > | the Linux-PAM vendor configuration directory. Files in /etc/pam.d override > | files with the same name in this directory. > > I hope this documentation is not wrong, and Debian's Linux-PAM supports this > as > documented.
That seems to work, yes. What broke was the silent removal of modified /etc/pam.d/ files after the recent update. I had overrides e.g. in su (where I had uncommented the su without password directive), which got lost silently. At least a su.dpkg-old file was left in /etc/pam.d. Maybe that’s the desired behaviour, but it took me a while to understand the issue.
