diff --git a/debian/login.defs b/debian/login.defs
index cf0f66b1..28ba638d 100644
--- a/debian/login.defs
+++ b/debian/login.defs
@@ -315,6 +315,11 @@ ENCRYPT_METHOD SHA512
 #
 NONEXISTENT	/nonexistent
 
+#
+# Allow newuidmap and newgidmap when running under an alternative
+# primary group.
+#
+#GRANT_AUX_GROUP_SUBIDS yes
 
 ################# OBSOLETED BY PAM ##############
 #						#