Revert upstream change that prevents pam_unix from working with sgid shadow applications. Authors: Steve Langasek Upstream status: to be submitted (and debated...) Index: debian-pkg-pam/modules/pam_unix/passverify.c =================================================================== --- debian-pkg-pam.orig/modules/pam_unix/passverify.c 2009-04-17 12:46:39.000000000 -0700 +++ debian-pkg-pam/modules/pam_unix/passverify.c 2009-04-17 12:46:40.000000000 -0700 @@ -203,11 +203,11 @@ * ...and shadow password file entry for this user, * if shadowing is enabled */ + *spwdent = pam_modutil_getspnam(pamh, name); #ifndef HELPER_COMPILE - if (geteuid() || SELINUX_ENABLED) + if (*spwdent == NULL && (geteuid() || SELINUX_ENABLED)) return PAM_UNIX_RUN_HELPER; #endif - *spwdent = pam_modutil_getspnam(pamh, name); if (*spwdent == NULL || (*spwdent)->sp_pwdp == NULL) return PAM_AUTHINFO_UNAVAIL; }