It seems to be related to a recent change on PAM handling. Which version of Nixpkgs are you following?