- (dtucker) [auth1.c] Ensure do_pam_account is called for Protocol 1

   connections with empty passwords.  Patch from davidwu at nbttech.com,
   ok djm@

2 files changed, 13 insertions, 3 deletions

diff --git a/ChangeLog b/ChangeLog
index ec4f1e02..8394cfef 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+20040623
+ - (dtucker) [auth1.c] Ensure do_pam_account is called for Protocol 1
+   connections with empty passwords.  Patch from davidwu at nbttech.com,
+   ok djm@
+
 20040524
  - (dtucker) [auth-pam.c] Bug #839: Ensure that pam authentication "thread"
    is terminated if the privsep slave exits during keyboard-interactive
@@ -999,4 +1004,4 @@
    - (djm) Trim deprecated options from INSTALL. Mention UsePAM
    - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
 
-$Id: ChangeLog,v 1.3316.2.5 2004/05/24 01:53:42 dtucker Exp $
+$Id: ChangeLog,v 1.3316.2.6 2004/06/22 23:17:03 dtucker Exp $
diff --git a/auth1.c b/auth1.c
index f145cf03..9996ae23 100644
--- a/auth1.c
+++ b/auth1.c
@@ -81,8 +81,13 @@ do_authloop(Authctxt *authctxt)
 	    (!options.kerberos_authentication || options.kerberos_or_local_passwd) &&
 #endif
 	    PRIVSEP(auth_password(authctxt, ""))) {
-		auth_log(authctxt, 1, "without authentication", "");
-		return;
+#ifdef USE_PAM
+		if (options.use_pam && (PRIVSEP(do_pam_account())))
+#endif
+		{
+			auth_log(authctxt, 1, "without authentication", "");
+			return;
+		}
 	}
 
 	/* Indicate that authentication is needed. */