1 files changed, 13 insertions, 3 deletions

diff --git a/auth-pam.c b/auth-pam.c
index 0446cd559..fb9ae954a 100644
--- a/auth-pam.c
+++ b/auth-pam.c
@@ -47,7 +47,7 @@
 
 /* Based on $FreeBSD: src/crypto/openssh/auth2-pam-freebsd.c,v 1.11 2003/03/31 13:48:18 des Exp $ */
 #include "includes.h"
-RCSID("$Id: auth-pam.c,v 1.126 2005/07/17 07:18:50 djm Exp $");
+RCSID("$Id: auth-pam.c,v 1.128 2006/01/29 05:46:13 dtucker Exp $");
 
 #ifdef USE_PAM
 #if defined(HAVE_SECURITY_PAM_APPL_H)
@@ -716,8 +716,18 @@ sshpam_query(void *ctx, char **name, char **info,
                         plen++;
                         xfree(msg);
                         break;
-                case PAM_SUCCESS:
                 case PAM_AUTH_ERR:
+                        debug3("PAM: PAM_AUTH_ERR");
+                        if (**prompts != NULL && strlen(**prompts) != 0) {
+                                *info = **prompts;
+                                **prompts = NULL;
+                                *num = 0;
+                                **echo_on = 0;
+                                ctxt->pam_done = -1;
+                                return 0;
+                        }
+                        /* FALLTHROUGH */
+                case PAM_SUCCESS:
                         if (**prompts != NULL) {
                                 /* drain any accumulated messages */
                                 debug("PAM: %s", **prompts);
@@ -763,7 +773,7 @@ sshpam_respond(void *ctx, u_int num, char **resp)
         Buffer buffer;
         struct pam_ctxt *ctxt = ctx;
 
-        debug2("PAM: %s entering, %d responses", __func__, num);
+        debug2("PAM: %s entering, %u responses", __func__, num);
         switch (ctxt->pam_done) {
         case 1:
                 sshpam_authenticated = 1;