Blame SOURCES/vmtoolsd.pam

f959a3
#%PAM-1.0
f959a3
auth       substack     password-auth
f959a3
auth       include      postlogin
f959a3
account    required     pam_nologin.so
f959a3
account    include      password-auth