From 3c1272ff631353abb5ac957268d593fbe4d15f60 Mon Sep 17 00:00:00 2001
From: Nalin Dahyabhai <nalin@fedoraproject.org>
Date: Tue, 19 May 2009 23:21:48 +0000
Subject: [PATCH] - add an auth stack to ksu's PAM configuration so that
 pam_setcred() calls     won't just fail

---
 krb5.spec | 6 +++++-
 ksu.pamd  | 1 +
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/krb5.spec b/krb5.spec
index 1da30b8..8c0f7f6 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -13,7 +13,7 @@
 Summary: The Kerberos network authentication system
 Name: krb5
 Version: 1.6.3
-Release: 105%{?dist}
+Release: 106%{?dist}
 # Maybe we should explode from the now-available-to-everybody tarball instead?
 # http://web.mit.edu/kerberos/dist/krb5/1.6/krb5-1.6.2-signed.tar
 Source0: krb5-%{version}.tar.gz
@@ -228,6 +228,10 @@ to obtain initial credentials from a KDC using a private key and a
 certificate.
 
 %changelog
+* Tue May 19 2009 Nalin Dahyabhai <nalin@redhat.com> 1.6.3-106
+- add an auth stack to ksu's PAM configuration so that pam_setcred() calls
+  won't just fail
+
 * Mon May 11 2009 Nalin Dahyabhai <nalin@redhat.com> 1.6.3-105
 - make PAM support for ksu also set PAM_RUSER
 
diff --git a/ksu.pamd b/ksu.pamd
index 082837f..66f5b2c 100644
--- a/ksu.pamd
+++ b/ksu.pamd
@@ -1,3 +1,4 @@
 #%PAM-1.0
+auth    include  su
 account include  su
 session include  su