===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/auth2-passwd.c,v
retrieving revision 1.2.6.1
retrieving revision 1.3
diff -u -r1.2.6.1 -r1.3
--- src/usr.bin/ssh/auth2-passwd.c	2003/09/16 21:20:24	1.2.6.1
+++ src/usr.bin/ssh/auth2-passwd.c	2003/04/08 20:21:28	1.3
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: auth2-passwd.c,v 1.2.6.1 2003/09/16 21:20:24 brad Exp $");
+RCSID("$OpenBSD: auth2-passwd.c,v 1.3 2003/04/08 20:21:28 itojun Exp $");
 
 #include "xmalloc.h"
 #include "packet.h"
@@ -47,7 +47,8 @@
 		logit("password change not supported");
 	password = packet_get_string(&len);
 	packet_check_eom();
-	if (PRIVSEP(auth_password(authctxt, password)) == 1)
+	if (authctxt->valid &&
+	    PRIVSEP(auth_password(authctxt, password)) == 1)
 		authenticated = 1;
 	memset(password, 0, len);
 	xfree(password);