Have a look in the /etc/pam.d directory and see (also the inconvenient-to-use /etc/pam.conf)
It is set up slightly differently on all systems, but basically for 'login' you need to satisfy all of the requirements for ACCOUNT, SESSION, and PASSWORD - whatever they may be.
|