`libpam-systemd`should be called in the PAM stack.

Run `pam-auth-update` and check that it's enabled