On Fri, Nov 06, 2020 at 07:02:53PM +0100, Jens John wrote: > Just boot into the faulty environment, try the log in a couple of > times (perhaps even on a TTY), reboot into recovery, inspect the > journald and/or syslog records of the events, if any. Excellent advice ! Seems /usr/lib/security/pam_tally.so and pam_tally2.so were missing. Rsync'd them from another machine, all OK now ! Now why these two were missing is the next question ... Many thanks to all who responded, and to Jens in particular. -- FA