Index: pwlib.c
--- pwlib.c.orig
+++ pwlib.c
@@ -312,7 +312,7 @@ etc_passwd_file_verify(char *user, char *supplied_pass
     data->status = TAC_PLUS_AUTHEN_STATUS_FAIL;
 
     setpwent();
-    pw = getpwnam(user);
+    pw = getpwnam_shadow(user);
     endpwent();
 
     if (pw == NULL) {
