+ status = pam_setcred(pamh, PAM_ESTABLISH_CRED);
+ if (status == PAM_SUCCESS) {
+ sudo_pam_cred_established = true;
+ } else if (sudo_pam_authenticated) {
+ const char *s = pam_strerror(pamh, status);
+ if (s != NULL)
+ log_warning(NO_MAIL, N_("unable to establish credentials: %s"), s);
+ goto done;
+ }