diff --git a/openssh.spec b/openssh.spec
index 706d235..4a56e42 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -79,7 +79,7 @@
 
 # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1
 %define openssh_ver 5.8p2
-%define openssh_rel 12
+%define openssh_rel 13
 %define pam_ssh_agent_ver 0.9.2
 %define pam_ssh_agent_rel 31
 
@@ -765,6 +765,9 @@ fi
 %endif
 
 %changelog
+* Thu Jul 14 2011 Jan F. Chadima <jchadima@redhat.com> - 5.8p2-13 + 0.9.2-31
+- Add postlogin to pam. (#718807)
+
 * Tue Jun 28 2011 Jan F. Chadima <jchadima@redhat.com> - 5.8p2-12 + 0.9.2-31
 - Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
 - Split out the host keygen into their own command, to ease future migration
diff --git a/sshd.pam b/sshd.pam
index bf775a3..7455e91 100644
--- a/sshd.pam
+++ b/sshd.pam
@@ -1,6 +1,7 @@
 #%PAM-1.0
 auth	   required	pam_sepermit.so
 auth       include      password-auth
+auth       include      postlogin
 account    required     pam_nologin.so
 account    include      password-auth
 password   include      password-auth
@@ -11,3 +12,4 @@ session    required     pam_loginuid.so
 session    required     pam_selinux.so open env_params
 session    optional     pam_keyinit.so force revoke
 session    include      password-auth
+session    include      postlogin