auth    sufficient pam_rootok.so debug
auth    sufficient pam_group.so group=wheel
auth    sufficient pam_unix.so nullok_secure try_first_pass
auth    requisite  /usr/local/lib/pam_sss.so use_first_pass

account sufficient pam_login_access.so
account sufficient pam_unix.so
account requisite  /usr/local/lib/pam_sss.so

Password:
su: failed to establish credentials.

Oct 31 16:29:48 hostname sudo[764]: authentication success; logname=maf uid=23838 euid=0 tty=/dev/pts/4 ruser=maf rhost= user=maf
Oct 31 16:29:48 hostname su: pam_setcred: unknown user

getent passwd maf
maf:*:23838:20466:Maxim:/home/maf:/bin/bash


getent group wheel
wheel:*:0:root,maf

sudo grep maf /etc/login.access
Password:
+ : maf : ALL