I think you need to make the effective uid of the program to be root. It worked for me Daniel ----- Original Message ----- From: "Reeves, Drue" <Drue.Reeves@COMPAQ.com> To: <pam-list@redhat.com> Sent: Friday, April 12, 2002 6:35 AM Subject: Setting groupIDs within pam_authenticate() > Hello. > > I am trying to set the user and group ID's for the user and process currently calling pam_authenticate(). However, when I try to call setgid() or setuid(), the systems tells me that these calls are not allowed at this time. If I use setgroups() then, the function call works but, after the application exits, the user ID is not set properly. > > Anyone know why? Can you set group and user ID's before the user has authenticated inside of the pam_authenticate() call? > > Thank you, > > Drue > > > > _______________________________________________ > > Pam-list@redhat.com > https://listman.redhat.com/mailman/listinfo/pam-list > >