pam: validate the user's account as part of the authentication flow

kadeessh · Sep 22, 2022 · 4b3e639 · 4b3e639
1 parent 2431382
commit 4b3e639
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/internal/authentication/os/pam.go b/internal/authentication/os/pam.go
@@ -62,6 +62,11 @@ func (pm OS) AuthenticateUser(sshctx session.ConnMetadata, password []byte) (aut
 		pm.logger.Warn("error Authenticate", zap.Error(err))
 		return nil, false, err
 	}
+	err = t.AcctMgmt(0)
+	if err != nil {
+		pm.logger.Warn("error Authenticate", zap.Error(err))
+		return nil, false, err
+	}
 	u, err := user.Lookup(sshctx.User())
 	if err != nil {
 		return nil, false, err