1 files changed, 5 insertions, 0 deletions

diff --git a/auth2.c b/auth2.c
index 639bf9117..e6ec8ddcd 100644
--- a/auth2.c
+++ b/auth2.c
@@ -213,6 +213,11 @@ userauth_finish(Authctxt *authctxt, int authenticated, char *method)
             !auth_root_allowed(method))
                 authenticated = 0;
 
+#ifdef USE_PAM
+        if (options.use_pam && authenticated && !PRIVSEP(do_pam_account()))
+                authenticated = 0;
+#endif
+
 #ifdef _UNICOS
         if (authenticated && cray_access_denied(authctxt->user)) {
                 authenticated = 0;