diff options
| -rw-r--r-- | src/providers/krb5/krb5_auth.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c index 986e449fd..50028e15d 100644 --- a/src/providers/krb5/krb5_auth.c +++ b/src/providers/krb5/krb5_auth.c @@ -898,8 +898,9 @@ static void krb5_child_done(struct tevent_req *subreq) goto done; } - /* if using a dedicated kpasswd server.. */ - if (kr->kpasswd_srv != NULL) { + /* if using a dedicated kpasswd server for a chpass operation... */ + if (kr->kpasswd_srv != NULL && + (pd->cmd == SSS_PAM_CHAUTHTOK || pd->cmd == SSS_PAM_CHAUTHTOK_PRELIM)) { /* ..which is unreachable by now.. */ if (msg_status == PAM_AUTHTOK_LOCK_BUSY) { be_fo_set_port_status(state->be_ctx, |