If a timeout is configured by PAM, make sure we set the

tac_readtimeout_enable to a non-zero value to get TACACS+ timeouts to
work as expected.

1 files changed, 4 insertions, 1 deletions

diff --git a/support.c b/support.c
index 292a3a9..1558a74 100644
--- a/support.c
+++ b/support.c
@@ -259,8 +259,11 @@ int _pam_parse (int argc, const char **argv) {
             /* FIXME atoi() doesn't handle invalid numeric strings well */
             tac_timeout = atoi(*argv + 8);
 
-            if (tac_timeout < 0)
+            if (tac_timeout < 0) {
                 tac_timeout = 0;
+            } else { 
+                tac_readtimeout_enable = 1;
+            }
         } else {
             _pam_log (LOG_WARNING, "unrecognized option: %s", *argv);
         }