https://bugzilla.redhat.com/show_bug.cgi?id=2291235
--- Comment #54 from Adam Williamson awilliam@redhat.com --- Based on c#42 I feel like the safest thing to try here would be to turn the pam dep on authselect into Requires(meta) . Dropping the suggests: sssd from authselect seems like a slightly bigger change, and also time-limited since rpm 4.20 will ignore it for ordering. so I'd suggest trying Requires(meta) in pam first, and we can see if that's enough to resolve the issue...