search for: permitgidoverrid

...comparing getgid() before and after calling do_pam_setcred. If the gid changes it sets pw->gid to the new gid, which is used in later functions. I don't know if this is considered the proper way to achieve that behavior in a safe way but it seemed logical to me. The behavior is optional; PermitGidOverride=no is the default. As for the reasoning, this is for a scheduled environment using Slurm. I am developing a pam module that "adopts" ssh processes into the appropriate batch job on the node. Users can launch jobs via Slurm that run with their gid as one of their supplementary groups....