If you would still like them to be able to log in, you can pass the "nullok" option on the module's command line: If your system encrypts home directories until after your users entered their password ...