Fix call to pam_end() when pam_open_session() fails.

diff --git a/auth/pam.c b/auth/pam.c
index 7f88bf3ec7c7122d4e98f01b1d67559f0e083159..bace4891aded38ac1b7db4740873e5dcd0b09d06 100644 (file)
--- a/auth/pam.c
+++ b/auth/pam.c
@@ -175,6 +175,8 @@ int
 pam_prep_user(pw)
     struct passwd *pw;
 {
+    int eval;
+
     if (pamh == NULL)
        pam_init(pw, NULL, NULL);
 
@@ -201,8 +203,8 @@ pam_prep_user(pw)
      * can at least cause pam_limits to be run by opening and then
      * immediately closing the session.
      */
-    if (pam_open_session(pamh, 0) != PAM_SUCCESS) {
-       (void) pam_end(pamh, error);
+    if ((eval = pam_open_session(pamh, 0)) != PAM_SUCCESS) {
+       (void) pam_end(pamh, eval | PAM_DATA_SILENT);
        return(AUTH_FAILURE);
     }
     (void) pam_close_session(pamh, 0);