summaryrefslogtreecommitdiffstats
path: root/source/lib/pam_errors.c
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2002-05-28 14:35:11 +0000
committerAndrew Bartlett <abartlet@samba.org>2002-05-28 14:35:11 +0000
commit2b78d493002a3ba13533429c6a14f5c0a92f43d1 (patch)
tree41ad06e4d353b064e2363151751c59eb1b100b0e /source/lib/pam_errors.c
parent496d3cf02c15ece7e13fa023deea740ee00486a8 (diff)
downloadsamba-2b78d493002a3ba13533429c6a14f5c0a92f43d1.tar.gz
samba-2b78d493002a3ba13533429c6a14f5c0a92f43d1.tar.xz
samba-2b78d493002a3ba13533429c6a14f5c0a92f43d1.zip
Updates to better report some NTSTATUS errors into PAM, and update to PAM
to correctly allow password changes on expired passwords. (No security implications, as its just a 'will I let you talk to the server' check). pam_winbind checks the password prior to changing it, so that users don't have to make up and type their new password when they havn't even got the old one right. This also helps with stacking etc. Andrew Bartlett
Diffstat (limited to 'source/lib/pam_errors.c')
-rw-r--r--source/lib/pam_errors.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/source/lib/pam_errors.c b/source/lib/pam_errors.c
index f74e4bf1765..e1d02151a62 100644
--- a/source/lib/pam_errors.c
+++ b/source/lib/pam_errors.c
@@ -67,6 +67,7 @@ const static struct {
{NT_STATUS_WRONG_PASSWORD, PAM_AUTH_ERR},
{NT_STATUS_LOGON_FAILURE, PAM_AUTH_ERR},
{NT_STATUS_ACCOUNT_EXPIRED, PAM_ACCT_EXPIRED},
+ {NT_STATUS_PASSWORD_EXPIRED, PAM_AUTHTOK_EXPIRED},
{NT_STATUS_PASSWORD_MUST_CHANGE, PAM_NEW_AUTHTOK_REQD},
{NT_STATUS_OK, PAM_SUCCESS}
};