From 4e3b55b5f6be51b03c8c51f764aa71677d184847 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Fri, 4 May 2012 16:24:50 +0200
Subject: Only reset kpasswd server status when performing a chpass operation

https://fedorahosted.org/sssd/ticket/1316
---
 src/providers/krb5/krb5_auth.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
index 986e449fd..50028e15d 100644
--- a/src/providers/krb5/krb5_auth.c
+++ b/src/providers/krb5/krb5_auth.c
@@ -898,8 +898,9 @@ static void krb5_child_done(struct tevent_req *subreq)
         goto done;
     }
 
-    /* if using a dedicated kpasswd server.. */
-    if (kr->kpasswd_srv != NULL) {
+    /* if using a dedicated kpasswd server for a chpass operation... */
+    if (kr->kpasswd_srv != NULL &&
+        (pd->cmd == SSS_PAM_CHAUTHTOK || pd->cmd == SSS_PAM_CHAUTHTOK_PRELIM)) {
         /* ..which is unreachable by now.. */
         if (msg_status == PAM_AUTHTOK_LOCK_BUSY) {
             be_fo_set_port_status(state->be_ctx,
-- 
cgit