--- tcb-1.0.2/pam_tcb/pam_unix_auth.c~ 2008-05-21 09:16:13.000000000 -0600 +++ tcb-1.0.2/pam_tcb/pam_unix_auth.c 2008-05-21 09:16:13.000000000 -0600 @@ -34,6 +34,7 @@ PAM_EXTERN int pam_sm_authenticate(pam_h if (!_set_ctrl(pamh, flags, argc, argv)) return PAM_ABORT; + set(UNIX_SHADOW); /* failed malloc is ok */ retval_data = malloc(sizeof(*retval_data)); --- tcb-1.0.2/pam_tcb/pam_unix_passwd.c~ 2008-05-21 09:17:48.000000000 -0600 +++ tcb-1.0.2/pam_tcb/pam_unix_passwd.c 2008-05-21 09:17:48.000000000 -0600 @@ -589,6 +589,7 @@ PAM_EXTERN int pam_sm_chauthtok(pam_hand if (!_set_ctrl(pamh, flags, argc, argv)) return PAM_ABORT; + set(UNIX_SHADOW); /* get the username */ retval = pam_get_user(pamh, &user, NULL); --- tcb-1.0.2/pam_tcb/pam_unix_sess.c~ 2008-05-21 09:19:17.000000000 -0600 +++ tcb-1.0.2/pam_tcb/pam_unix_sess.c 2008-05-21 09:19:17.000000000 -0600 @@ -25,6 +25,7 @@ PAM_EXTERN int pam_sm_open_session(pam_h if (!_set_ctrl(pamh, flags, argc, argv)) return PAM_ABORT; + set(UNIX_SHADOW); retval = pam_get_item(pamh, PAM_USER, &item); user = item;