[SSSD] [PATCH] use old password if available during password change

Simo Sorce ssorce at redhat.com
Mon Oct 12 12:59:16 UTC 2009


On Mon, 2009-10-12 at 14:49 +0200, Sumit Bose wrote:
> > Do they skip checks or ignore if the provided password is valid or
> not ?
> > Should we think of forking a child in proxy and running it as the
> user
> > that is attempting the password change? (Assuming we know it ?)
> 
> I think forking isn't needed here, because pam_sss should be kept
> simple. Send everything you know to sssd and wait for a response.

I meant forking in the proxy module, not in pam_sss, you can't fork in
pam_sss.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list