I tried this PAM configuration on openSUSE ... and it worked! Now I just need to find out why it works differently on SLES. Thanks, Tom