Dear Maximiliano, maintainers 1) I reproduced my problem in the same machine with another existing user and with a brand-new user: in both cases no "Password" prompt.
As for the profile directory, all profiles are in .local/share/konsole/Root-Large-BRL.profile By mistake (sorry) I sent a relic profile file in my previous email but the contents are more or less equivalent: $cat .local/share/konsole/Root-Large-BRL.profile [Appearance] ColorScheme=BlackOnRandomLight Font=DejaVu Sans Mono,18,-1,2,50,0,0,0,0,0 [General] Command=/bin/su --login Directory=/root Name=Root-Large-BRL Parent=FALLBACK/ StartInCurrentSessionDir=false TerminalColumns=135 TerminalRows=17 2) As for pam, I have no custom settings in /etc/pam.d but I notice that some files have been changed few minutes after the start of my full-upgrade of 2016-06-28: # ls -lt /etc/pam.d/ total 120 -rw-r--r-- 1 root root 1234 Jun 28 11:48 common-session -rw-r--r-- 1 root root 1154 Jun 28 11:48 common-session-noninteractive -rw-r--r-- 1 root root 1480 Jun 28 11:48 common-password -rw-r--r-- 1 root root 1208 Jun 28 11:48 common-account -rw-r--r-- 1 root root 1249 Jun 28 11:48 common-auth ... the others are older... Below I report my version of *pam and cat the contents of the common-* (standard) files. I'm sorry but I have no knowledge of pam so I cannot detect if there are problems in these files. Thanks for your time, ric ############################ # aptitude search '?name(pam) ?installed' -F '%p %v %V' libpam-cap 1:2.25-1 1:2.25-1 libpam-ck-connector 0.4.6-5 0.4.6-5 libpam-gnome-keyring 3.20.0-1 3.20.0-1 libpam-kwallet-common 5.6.5-1 5.6.5-1 libpam-kwallet5 5.6.5-1 5.6.5-1 libpam-modules 1.1.8-3.3 1.1.8-3.3 libpam-modules-bin 1.1.8-3.3 1.1.8-3.3 libpam-runtime 1.1.8-3.3 1.1.8-3.3 libpam-systemd 230-2 230-2 libpam0g 1.1.8-3.3 1.1.8-3.3 python-pam 0.4.2-13.2 0.4.2-13.2 # ############################ # cat /etc/pam.d/common-*|egrep -v '^#' account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so account requisite pam_deny.so account required pam_permit.so auth [success=1 default=ignore] pam_unix.so nullok_secure auth requisite pam_deny.so auth required pam_permit.so auth optional pam_cap.so password [success=1 default=ignore] pam_unix.so obscure sha512 password requisite pam_deny.so password required pam_permit.so password optional pam_gnome_keyring.so session [default=1] pam_permit.so session requisite pam_deny.so session required pam_permit.so session required pam_unix.so session optional pam_systemd.so session optional pam_ck_connector.so nox11 session [default=1] pam_permit.so session requisite pam_deny.so session required pam_permit.so session required pam_unix.so #