authentication with plain file works, so the culprit seems to be the pam module. ii libapache2-mod-auth-pam 1.1.1-6.1 module for Apache2 which authenticate using