From 6f6e4408cedaebbfcef61e5adb78ba75abe5839d Mon Sep 17 00:00:00 2001
From: Pavel Březina <pbrezina@redhat.com>
Date: Mon, 15 Jul 2013 13:44:31 +0200
Subject: print hint about password complexity when new password is rejected

https://fedorahosted.org/sssd/ticket/1827
---
 src/providers/ldap/sdap_async.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'src/providers/ldap/sdap_async.c')

diff --git a/src/providers/ldap/sdap_async.c b/src/providers/ldap/sdap_async.c
index 6dfe9164..bdd3c3c8 100644
--- a/src/providers/ldap/sdap_async.c
+++ b/src/providers/ldap/sdap_async.c
@@ -649,6 +649,14 @@ static void sdap_exop_modify_passwd_done(struct sdap_op *op,
         ret = EOK;
         break;
     case LDAP_CONSTRAINT_VIOLATION:
+        state->user_error_message = talloc_strdup(state,
+            "Please make sure the password meets the complexity constraints.");
+        if (state->user_error_message == NULL) {
+            DEBUG(SSSDBG_CRIT_FAILURE, ("talloc_strdup failed\n"));
+            ret = ENOMEM;
+            goto done;
+        }
+
         ret = ERR_CHPASS_DENIED;
         break;
     default:
-- 
cgit