In /etc/pam.d/common-auth I found the following line: auth required pam_unix.so nullok_secure Neither manpages, docs, or Google have anything to say about the nullok_secure option. If anyone could shed some light on it, that would be great. Thanks, Nick Hoffman nick.hoffman at altcall.com