diff --git a/set_perms.c b/set_perms.c
index 0c161348c..428fd9864 100644
--- a/set_perms.c
+++ b/set_perms.c
@@ -281,6 +281,10 @@ runas_setup()
 #endif
 
     if (runas_pw->pw_name != NULL) {
+#ifdef HAVE_PAM
+	pam_prep_user(runas_pw);
+#endif /* HAVE_PAM */
+
 #ifdef HAVE_LOGIN_CAP_H
 	if (def_flag(I_USE_LOGINCLASS)) {
 	    /*
diff --git a/sudo.h b/sudo.h
index 942326be9..062355ebd 100644
--- a/sudo.h
+++ b/sudo.h
@@ -222,6 +222,7 @@ int touch		__P((char *, time_t));
 int user_is_exempt	__P((void));
 void set_fqdn		__P((void));
 char *sudo_getepw	__P((struct passwd *));
+int pam_prep_user	__P((struct passwd *));
 YY_DECL;
 
 /* Only provide extern declarations outside of sudo.c. */