security: fix improper PAM authorization handling (#6819)

ysf · unknwon · unknwon · commit 64102be2c90e · 2022-03-11T14:52:11.000+08:00
Co-authored-by: Joe Chen &lt;jc@unknwon.io&gt;
# Conflicts:
#	CHANGELOG.md
#	internal/auth/pam/pam.go
diff --git a/internal/auth/pam/pam.go b/internal/auth/pam/pam.go
@@ -27,9 +27,9 @@ func PAMAuth(serviceName, userName, passwd string) error {
 		return err
 	}
 
-	if err = t.Authenticate(0); err != nil {
+	err = t.Authenticate(0)
+	if err != nil {
 		return err
 	}
-
-	return nil
+	return t.AcctMgmt(0)
 }

Original file line number	Diff line number	Diff line change
`@@ -27,9 +27,9 @@ func PAMAuth(serviceName, userName, passwd string) error {`
`27`	`27`	`return err`
`28`	`28`	`}`
`29`	`29`
`30`		`- if err = t.Authenticate(0); err != nil {`
	`30`	`+ err = t.Authenticate(0)`
	`31`	`+ if err != nil {`
`31`	`32`	`return err`
`32`	`33`	`}`
`33`		`-`
`34`		`- return nil`
	`34`	`+ return t.AcctMgmt(0)`
`35`	`35`	`}`