diff options
| author | Günther Deschner <gd@samba.org> | 2006-01-13 11:11:23 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 11:06:06 -0500 |
| commit | 29ba5c17cda35f4277e9d84e9ce2893685f3c683 (patch) | |
| tree | ff3c3a7fd991c05f2202ef63f8ff6fea0b4a3ea6 /source3/nsswitch/pam_winbind.h | |
| parent | dbac6701664d3d08495469c734dc47bca649da68 (diff) | |
| download | samba-29ba5c17cda35f4277e9d84e9ce2893685f3c683.tar.gz samba-29ba5c17cda35f4277e9d84e9ce2893685f3c683.tar.bz2 samba-29ba5c17cda35f4277e9d84e9ce2893685f3c683.zip | |
r12900: Merge from trunk:
Correctly handle the case where users logon with an expired password.
In that case pam_sm_authenticate has to return PAM_SUCESS instead of
PAM_NEW_AUTHTOK_REQD or PAM_AUTHTOK_EXPIRED and pam_sm_acct_mgmt has to
take care of requesting an immediate password change. (see the Linux PAM
documentation).
Fixes Bugzilla #1524, #3205. Tested with login, sshd, kdm and gdm on
Linux.
Thanks to Scott Barker <Scott_Barker@mtechIT.com>.
Guenther
(This used to be commit 4cb662ffd76dbe30003c618c94ccf6ebd4afb48c)
Diffstat (limited to 'source3/nsswitch/pam_winbind.h')
| -rw-r--r-- | source3/nsswitch/pam_winbind.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/source3/nsswitch/pam_winbind.h b/source3/nsswitch/pam_winbind.h index 7cae477714..86ba977287 100644 --- a/source3/nsswitch/pam_winbind.h +++ b/source3/nsswitch/pam_winbind.h @@ -84,6 +84,8 @@ do { \ #define WINBIND__OLD_PASSWORD (1<<5) #define WINBIND_REQUIRED_MEMBERSHIP (1<<6) +#define PAM_WINBIND_NEW_AUTHTOK_REQD "PAM_WINBIND_NEW_AUTHTOK_REQD" + /* * here is the string to inform the user that the new passwords they * typed were not the same. |