There are two superior alternatives in the bug report now. Please pick one or both. (PAM config or mode 4550, with user "olpc" in the appropriate group) http://dev.laptop.org/ticket/5537