There are several problems with the default /etc/pam.d/kde. It doesnt include pam_console, and it doesnt reference the standard system-auth module. system-auth contains lots of goodies as standard, such as pam-env, plus it provides a centralised configuration for authentication. I suggest that /etc/pam.d/kde should be exactly the same as the default /etc/pam.d/login There is also some minor untidyness with /etc/pam.d/kscreensaver and xscreensaver. They should also reference the system-auth module, rather than using pam_pwdb themselves. I suggest that both of these files should be a single line: auth required /lib/security/pam_stack.so service=system-auth
*** This bug has been marked as a duplicate of 5953 ***