diff --git a/lib/libpam/modules/pam_opieaccess/pam_opieaccess.8 b/lib/libpam/modules/pam_opieaccess/pam_opieaccess.8 index fac671e80c6d..b5392029c2ed 100644 --- a/lib/libpam/modules/pam_opieaccess/pam_opieaccess.8 +++ b/lib/libpam/modules/pam_opieaccess/pam_opieaccess.8 @@ -78,7 +78,7 @@ It also provides null functions for the remaining module types. The authentication component .Pq Fn pam_sm_authenticate , returns -.Dv PAM_IGNORE +.Dv PAM_SUCCESS in two cases: .Bl -enum .It diff --git a/lib/libpam/modules/pam_opieaccess/pam_opieaccess.c b/lib/libpam/modules/pam_opieaccess/pam_opieaccess.c index d9499d97f8e9..67cbfc0203e4 100644 --- a/lib/libpam/modules/pam_opieaccess/pam_opieaccess.c +++ b/lib/libpam/modules/pam_opieaccess/pam_opieaccess.c @@ -68,7 +68,7 @@ pam_sm_authenticate(pam_handle_t *pamh, int flags __unused, pwent = getpwnam(luser); if (pwent == NULL || opielookup(&opie, luser) != 0) - return (PAM_IGNORE); + return (PAM_SUCCESS); r = pam_get_item(pamh, PAM_RHOST, (const void **)&rhost); if (r != PAM_SUCCESS) @@ -76,7 +76,7 @@ pam_sm_authenticate(pam_handle_t *pamh, int flags __unused, if ((rhost == NULL || opieaccessfile(rhost)) && opiealways(pwent->pw_dir) != 0) - return (PAM_IGNORE); + return (PAM_SUCCESS); PAM_VERBOSE_ERROR("Refused; remote host is not in opieaccess");