$ ssh -o UserKnownHostsFile=/dev/null -l user 192.168.10.24
The authenticity of host '192.168.A.B (192.168.A.B)' can't be established.
ECDSA key fingerprint is SHA256:XXXX.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '192.168.A.B' (ECDSA) to the list of known hosts.
Password: 
client_loop: send disconnect: Broken pipe

debug3: mm_request_send: entering, type 26 [preauth]
debug3: mm_send_keystate: Finished sending state [preauth]
debug1: monitor_read_log: child log fd closed
debug3: ssh_sandbox_parent_finish: finished
debug1: PAM: establishing credentials
PAM: pam_setcred(): Authentication failure
debug1: do_cleanup
debug3: PAM: sshpam_thread_cleanup entering

root@nanopi-r4s:/etc/pam.d# cat sshd 
#%PAM-1.0
# pam_securetty.so is commented out since sshd already does a good job of
# protecting itself. You may uncomment it if you like, but then you may
# need to add additional consoles to /etc/securetty if you want to allow
# root logins on them, such as: ssh, pts/0, :0, etc
#auth            required        pam_securetty.so
# When using pam_faillock, print a message to the user if the account is
# locked. This lets the user know what is going on, but it also potentially
# gives additional information to attackers:
#auth            requisite       pam_faillock.so preauth
auth            include         system-auth
# To set a limit on failed authentications, the pam_faillock module
# can be enabled. See pam_faillock(8) for more information.
#auth            [default=die]   pam_faillock.so authfail
#auth            sufficient      pam_faillock.so authsucc
auth            include         postlogin
account         required        pam_nologin.so
account         include         system-auth
password        include         system-auth
session         include         system-auth
session         include         postlogin
session         required        pam_loginuid.so
-session        optional        pam_elogind.so

root@nanopi-r4s:/etc/pam.d# ls -l         
total 108
-rw-r--r-- 1 root root  146 Feb 19  2020 chage
-rw-r--r-- 1 root root  192 Feb 14  2020 chfn
-rw-r--r-- 1 root root  146 Feb 19  2020 chgpasswd
-rw-r--r-- 1 root root  146 Feb 19  2020 chpasswd
-rw-r--r-- 1 root root  192 Feb 14  2020 chsh
-rw-r--r-- 1 root root  244 Mar  4  2021 elogind-user
-rw-r--r-- 1 root root  146 Feb 19  2020 groupadd
-rw-r--r-- 1 root root  146 Feb 19  2020 groupdel
-rw-r--r-- 1 root root  146 Feb 19  2020 groupmems
-rw-r--r-- 1 root root  146 Feb 19  2020 groupmod
-rw-r--r-- 1 root root 1014 Jun 18  2020 login
-rw-r--r-- 1 root root  146 Feb 19  2020 newusers
-rw-r--r-- 1 root root  155 Nov  8  2018 other
-rw-r--r-- 1 root root  186 Feb 19  2020 passwd
-rw-r--r-- 1 root root  231 Nov 15  2018 postlogin
-rw-r--r-- 1 root root  183 Feb 20  2021 ppp
-rw-r--r-- 1 root root  200 Feb 19  2020 runuser
-rw-r--r-- 1 root root  150 Feb 19  2020 runuser-l
-rw-r--r-- 1 root root   77 Feb  2 19:10 screen
-rw-r--r-- 1 root root 1228 Apr 17 13:22 sshd
-rw-r--r-- 1 root root  545 Feb 19  2020 su
-rw-r--r-- 1 root root  210 Feb 19  2020 su-l
-rw-r--r-- 1 root root 2443 Jun 16  2020 system-auth
-rw-r--r-- 1 root root  146 Feb 19  2020 useradd
-rw-r--r-- 1 root root  146 Feb 19  2020 userdel
-rw-r--r-- 1 root root  146 Feb 19  2020 usermod
-rw-r--r-- 1 root root  314 Aug  5  2021 vsftpd
root@nanopi-r4s:/etc/pam.d#

+:root:192.168.0.0/16
+:janos:192.168.0.0/16