- (djm) Die screaming if start_pam() is called when UsePAM=no
diff --git a/auth-pam.c b/auth-pam.c
index 234e8f4..34326c2 100644
--- a/auth-pam.c
+++ b/auth-pam.c
@@ -485,6 +485,9 @@
 void
 start_pam(const char *user)
 {
+	if (!options.use_pam)
+		fatal("PAM: initialisation requested when UsePAM=no");
+
 	if (sshpam_init(user) == -1)
 		fatal("PAM: initialisation failed");
 }