security: fix improper PAM authorization handling (#6819)

Co-authored-by: Joe Chen <jc@unknwon.io>

1 files changed, 6 insertions, 2 deletions

diff --git a/internal/auth/pam/pam.go b/internal/auth/pam/pam.go
index 0777bf7c..cbd3500d 100644
--- a/internal/auth/pam/pam.go
+++ b/internal/auth/pam/pam.go
@@ -25,6 +25,10 @@ func (c *Config) doAuth(login, password string) error {
 	if err != nil {
 		return err
 	}
-
-	return t.Authenticate(0)
+	
+	err = t.Authenticate(0)
+	if err != nil {
+		return err
+	}
+	return t.AcctMgmt(0)
 }