From 47931087a7953d519bb1daeac8621a2db18b8ce2 Mon Sep 17 00:00:00 2001
From: Ralf Haferkamp <rhafer@suse.de>
Date: Fri, 12 Mar 2010 15:13:59 +0100
Subject: Warn user about an expired password

---
 src/sss_client/pam_sss.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/sss_client/pam_sss.c b/src/sss_client/pam_sss.c
index a7da1ec45..d62e9485c 100644
--- a/src/sss_client/pam_sss.c
+++ b/src/sss_client/pam_sss.c
@@ -1120,7 +1120,12 @@ static int pam_sss(enum sss_cli_command task, pam_handle_t *pamh,
     if (ret == PAM_SUCCESS && task == SSS_PAM_ACCT_MGMT &&
         pam_get_data(pamh, PWEXP_FLAG, (const void **) &exp_data) ==
                                                                   PAM_SUCCESS) {
-            return PAM_NEW_AUTHTOK_REQD;
+        ret = do_pam_conversation(pamh, PAM_TEXT_INFO,
+                _("Password expired. Change your password now."), NULL, NULL);
+        if (ret != PAM_SUCCESS) {
+            D(("do_pam_conversation failed."));
+        }
+        return PAM_NEW_AUTHTOK_REQD;
     }
 
     overwrite_and_free_authtoks(&pi);
-- 
cgit