- (djm) Bug #564: Perform PAM account checks for all authentications when

   UsePAM=yes; ok dtucker

1 files changed, 6 insertions, 0 deletions

diff --git a/auth1.c b/auth1.c
index 7c010010..d8b5836b 100644
--- a/auth1.c
+++ b/auth1.c
@@ -290,6 +290,12 @@ do_authloop(Authctxt *authctxt)
 			authenticated = 0;
 #endif
 
+#ifdef USE_PAM
+		if (options.use_pam && authenticated && 
+		    !PRIVSEP(do_pam_account()))
+			authenticated = 0;
+#endif
+
 		/* Log before sending the reply */
 		auth_log(authctxt, authenticated, get_authname(type), info);