PAM/KRB5: optional otp and password prompting

Depending on the available Kerberos pre-authentication methods pam_sss
will prompt the user for a password, 2 authentication factors or both.

Resolves https://fedorahosted.org/sssd/ticket/2988

1 files changed, 2 insertions, 0 deletions

diff --git a/src/sss_client/pam_message.h b/src/sss_client/pam_message.h
index f0a7a076c..34889e074 100644
--- a/src/sss_client/pam_message.h
+++ b/src/sss_client/pam_message.h
@@ -25,6 +25,7 @@
 
 #include <unistd.h>
 #include <stdint.h>
+#include <stdbool.h>
 
 #include "sss_client/sss_cli.h"
 
@@ -56,6 +57,7 @@ struct pam_items {
     char *otp_token_id;
     char *otp_challenge;
     char *first_factor;
+    bool password_prompting;
 
     char *cert_user;
     char *token_name;