#%PAM-1.0 auth include system-auth auth required pam_nologin.so account include system-auth password include system-auth session include system-auth should be instead: #%PAM-1.0 auth required pam_nologin.so auth include system-auth account include system-auth password include system-auth session include system-auth (see Bug 151173)
Jakub is right, Mike can you please do the change? By the way, this is another call for having pambase package with a login-manager service to just include for everything to be shared between xdm, entrance, gdm and kdm.
neither entrance installs a file like that ... both read pam_nologin.so first