Hello, in pam_access.c function pam_sm_setcred always returning PAM_IGNORE, but in "man pam_sm_setcred" PAM_IGNORE is not in the list of possible return values. This behavior gives us some unpredictable results while we using this pam module. Should it be better to always return PAM_SUCCESS like in pam_rhosts.c? Best, Alexander Bersenev