Re: PAM support lacks pam_setcred() call

[Brian Murphy]

Marc Singer wrote:

> In looking at the patch, I wonder if there is a conflict with
> switch_to_user call.  I wonder this, because my debugging uncovered
> that once I got pam_group to work, the switch_to_user() call overwrote
> it.
>
>  
Yes, the second call to pam_setcred is necessary to reestablish 
credentials after the initgroups
call (which resets the group membership to that in /etc/group).
When I said test the patch I meant I thought it did what you wanted - it 
seems to react in the correct
way under my testing with a similar group.conf file to yours.

/Brian