diff options
| author | Sumit Bose <sbose@redhat.com> | 2010-04-21 14:42:34 +0200 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-04-26 09:55:00 -0400 |
| commit | bd290f62727b8903d889705a9d129ee6c9d62bc9 (patch) | |
| tree | b9e2b762dcce26a5540213a959f7ea335d5ac070 /src/providers/ldap/ldap_auth.c | |
| parent | b843b55b1565176d9f27554d89e5e041b34c0dcf (diff) | |
| download | sssd-bd290f62727b8903d889705a9d129ee6c9d62bc9.tar.gz sssd-bd290f62727b8903d889705a9d129ee6c9d62bc9.tar.xz sssd-bd290f62727b8903d889705a9d129ee6c9d62bc9.zip | |
Display a message if a password reset by root fails
Diffstat (limited to 'src/providers/ldap/ldap_auth.c')
| -rw-r--r-- | src/providers/ldap/ldap_auth.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/providers/ldap/ldap_auth.c b/src/providers/ldap/ldap_auth.c index e0935da38..95931ac9d 100644 --- a/src/providers/ldap/ldap_auth.c +++ b/src/providers/ldap/ldap_auth.c @@ -636,6 +636,14 @@ void sdap_pam_chpass_handler(struct be_req *breq) goto done; } + if (pd->priv == 1 && pd->cmd == SSS_PAM_CHAUTHTOK_PRELIM && + pd->authtok_size == 0) { + DEBUG(4, ("Password reset by root is not supported.\n")); + pd->pam_status = PAM_PERM_DENIED; + dp_err = DP_ERR_OK; + goto done; + } + DEBUG(2, ("starting password change request for user [%s].\n", pd->user)); pd->pam_status = PAM_SYSTEM_ERR; |