From 1314f38b59748397b3429fb9bc9f9d6bac85d2f2 Mon Sep 17 00:00:00 2001 From: zeripath Date: Thu, 10 Mar 2022 02:00:05 +0000 Subject: [PATCH] fix pam authorization (#19040) https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb/ Co-authored-by: ysf <34326+ysf@users.noreply.github.com> --- modules/auth/pam/pam.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/modules/auth/pam/pam.go b/modules/auth/pam/pam.go index 30f13e440b..0a3d8e9f91 100644 --- a/modules/auth/pam/pam.go +++ b/modules/auth/pam/pam.go @@ -34,6 +34,10 @@ func Auth(serviceName, userName, passwd string) (string, error) { if err = t.Authenticate(0); err != nil { return "", err } + + if err = t.AcctMgmt(0); err != nil { + return "", err + } // PAM login names might suffer transformations in the PAM stack. // We should take whatever the PAM stack returns for it.