- add an auth stack to ksu's PAM configuration so that pam_setcred() calls

won't just fail

krb5.spec

@@ -13,7 +13,7 @@
 Summary: The Kerberos network authentication system
 Name: krb5
 Version: 1.6.3
-Release: 105%{?dist}
+Release: 106%{?dist}
 # Maybe we should explode from the now-available-to-everybody tarball instead?
 # http://web.mit.edu/kerberos/dist/krb5/1.6/krb5-1.6.2-signed.tar
 Source0: krb5-%{version}.tar.gz
@@ -228,6 +228,10 @@ to obtain initial credentials from a KDC using a private key and a
 certificate.
 
 %changelog
+* Tue May 19 2009 Nalin Dahyabhai <nalin@redhat.com> 1.6.3-106
+- add an auth stack to ksu's PAM configuration so that pam_setcred() calls
+  won't just fail
+
 * Mon May 11 2009 Nalin Dahyabhai <nalin@redhat.com> 1.6.3-105
 - make PAM support for ksu also set PAM_RUSER
 

ksu.pamd

@@ -1,3 +1,4 @@
 #%PAM-1.0
+auth    include  su
 account include  su
 session include  su