- (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output from

   failing PAM session modules to user then exit, similar to the way
   /etc/nologin is handled.  ok djm@

1 files changed, 7 insertions, 0 deletions

diff --git a/session.c b/session.c
index 89e1ec892..7a70b82e6 100644
--- a/session.c
+++ b/session.c
@@ -1439,6 +1439,13 @@ do_child(Session *s, const char *command)
 #endif /* HAVE_OSF_SIA */
 	}
 
+#ifdef USE_PAM
+	if (options.use_pam && !is_pam_session_open()) {
+		display_loginmsg();
+		exit(254);
+	}
+#endif
+
 	/*
 	 * Get the shell from the password data.  An empty shell field is
 	 * legal, and means /bin/sh.