[SSSD] [PATCH] Various fixes/improvment to ldap ppolicy handling
Ralf Haferkamp
rhafer at suse.de
Fri Mar 12 15:45:27 UTC 2010
Hi,
here are some more patches regarding the handling of the LDAP ppolicy
control.
Patch1: An error code of LDAP_INVALID_CREDENTIALS + a ppolicy control
with the error PP_passwordExpired indicates an expire password
as well.
Patch2: When doing LDAP authentiation for PAM_PRELIM_CHECK, treat
SDAP_AUTH_PW_EXPIRED as a successful authentication to be able to
continue the the password change
Patch3: Display a messages to the user when a password change is going to
be initiated because of an expired password.
feedback is of course welcome,
Ralf
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fixed-check-for-expired-passwords.patch
Type: text/x-patch
Size: 1491 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100312/ebb452ac/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Fixed-authentication-check-for-CHAUTHTOK_PRELIM.patch
Type: text/x-patch
Size: 1013 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100312/ebb452ac/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Warn-user-about-an-expired-password.patch
Type: text/x-patch
Size: 1131 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100312/ebb452ac/attachment-0002.bin>
More information about the sssd-devel
mailing list