This seems to bite quite many people. Maybe libpam-foreground could show an update notification or a debconf note if the PAM configuration was modified manually? ** Bug 41085 has been marked a duplicate of this bug ** Bug 43035 has been marked a duplicate of this bug -- Unable to start g-v-m https://launchpad.net/bugs/34063