diff --git a/gdm-autologin-pam b/gdm-autologin-pam
index 42b85d8..c3f7172 100644
--- a/gdm-autologin-pam
+++ b/gdm-autologin-pam
@@ -5,9 +5,9 @@ account    required    pam_nologin.so
 account    include     system-auth
 password   include     system-auth
 session    required    pam_selinux.so close
-session    include     system-auth
 session    required    pam_loginuid.so
 session    optional    pam_console.so
 session    required    pam_selinux.so open
 session    optional    pam_keyinit.so force revoke
 session    required    pam_namespace.so
+session    include     system-auth
diff --git a/gdm-pam b/gdm-pam
index 97a3afb..14f4aa7 100644
--- a/gdm-pam
+++ b/gdm-pam
@@ -7,11 +7,10 @@ account    required    pam_nologin.so
 account    include     system-auth
 password   include     system-auth
 session    required    pam_selinux.so close
-session    include     system-auth
 session    required    pam_loginuid.so
 session    optional    pam_console.so
 session    required    pam_selinux.so open
 session    optional    pam_keyinit.so force revoke
 session    required    pam_namespace.so
 session    optional    pam_gnome_keyring.so auto_start
-
+session    include     system-auth
diff --git a/gdm.spec b/gdm.spec
index 7b5e20c..180968f 100644
--- a/gdm.spec
+++ b/gdm.spec
@@ -16,7 +16,7 @@
 Summary: The GNOME Display Manager
 Name: gdm
 Version: 2.21.2
-Release: 0.2007.11.20.9%{?dist}
+Release: 0.2007.11.20.10%{?dist}
 Epoch: 1
 License: GPLv2+
 Group: User Interface/X
@@ -295,6 +295,9 @@ fi
 %attr(1770, root, gdm) %dir %{_localstatedir}/lib/gdm
 
 %changelog
+* Mon Jan  15 2008 Dan Walsh <dwalsh@redhat.com> - 1:2.21.2-0.2007.11.20.10
+- Fix gdm.pam file so that session include system-auth happens after other session setup
+
 * Mon Jan  7 2008 Ray Strode <rstrode@redhat.com> - 1:2.21.2-0.2007.11.20.9
 - hide guest account since it doesn't work