- (djm) Die screaming if start_pam() is called when UsePAM=no

1 files changed, 3 insertions, 0 deletions

diff --git a/auth-pam.c b/auth-pam.c
index 234e8f43..34326c24 100644
--- a/auth-pam.c
+++ b/auth-pam.c
@@ -485,6 +485,9 @@ KbdintDevice mm_sshpam_device = {
 void
 start_pam(const char *user)
 {
+	if (!options.use_pam)
+		fatal("PAM: initialisation requested when UsePAM=no");
+
 	if (sshpam_init(user) == -1)
 		fatal("PAM: initialisation failed");
 }