Comment 1 for bug 873975

workaround:

The symptom can be avoided by editing /etc/pam.d/common-session to read like this at the bottom:

session required pam_unix.so
session optional pam_loginuid.so
session optional pam_ck_connector.so

(note the lack of 'nox11' parameter of pam_ck_connector.so)