(In reply to Thorsten Kukuk from comment #8) > The fix is semi correct: upstream xrdp is wrong and broken. I have no idea > why they think they need to check the PAM config file themselves, but if > they do it, they need to check the full upstream search path, not parts of > it. Ye ... while based on what's there, I have a general patch to make pam.d directory configurable at build time, seeing how it would be acceptable: https://github.com/neutrinolabs/xrdp/pull/2552