diff --git a/at-3.1.10-pam.patch b/at-3.1.10-pam.patch
index d5e56b1..4ee7366 100644
--- a/at-3.1.10-pam.patch
+++ b/at-3.1.10-pam.patch
@@ -1,10 +1,11 @@
 --- at-3.1.10/pam_atd.pam   2007-07-03 13:29:24.000000000 +0200
 +++ at-3.1.10/pam_atd   2007-07-03 13:29:24.000000000 +0200
-@@ -0,0 +1,8 @@
+@@ -0,0 +1,9 @@
 +# The PAM configuration file for the at daemon
 +#
 +#
-+# PAM authentication not called, no auth modules needed
++auth       required    pam_env.so
++auth       include     password-auth
 +account    required    pam_access.so
 +account    include     password-auth
 +session    required    pam_loginuid.so
diff --git a/at.spec b/at.spec
index 30a0fba..b1f1462 100644
--- a/at.spec
+++ b/at.spec
@@ -6,7 +6,7 @@
 Summary: Job spooling tools
 Name: at
 Version: 3.1.10
-Release: 37%{?dist}
+Release: 38%{?dist}
 License: GPLv2+
 Group: System Environment/Daemons
 URL: http://ftp.debian.org/debian/pool/main/a/at
@@ -196,6 +196,9 @@ fi
 %attr(0755,root,root)	%{_libdir}/pm-utils/sleep.d/56atd
 
 %changelog
+* Tue Sep 29 2009 Tomas Mraz <tmraz@redhat.com> 3.1.10-38
+- authentication PAM modules have to be configured for pam_setcred()
+
 * Wed Sep 16 2009 Tomas Mraz <tmraz@redhat.com> 3.1.10-37
 - improve the PAM configuration, use password-auth common stack