[SSSD] [PATCH] Various fixes/improvment to ldap ppolicy handling

Ralf Haferkamp rhafer at suse.de
Fri Mar 12 15:45:27 UTC 2010


Hi,

here are some more patches regarding the handling of the LDAP ppolicy 
control.

Patch1: An error code of LDAP_INVALID_CREDENTIALS + a ppolicy control 
        with the error PP_passwordExpired indicates an expire password
        as well.
Patch2: When doing LDAP authentiation for PAM_PRELIM_CHECK, treat
        SDAP_AUTH_PW_EXPIRED as a successful authentication to be able to 
        continue the the password change
Patch3: Display a messages to the user when a password change is going to 
        be initiated because of an expired password.

feedback is of course welcome,
	Ralf
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fixed-check-for-expired-passwords.patch
Type: text/x-patch
Size: 1491 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100312/ebb452ac/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Fixed-authentication-check-for-CHAUTHTOK_PRELIM.patch
Type: text/x-patch
Size: 1013 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100312/ebb452ac/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Warn-user-about-an-expired-password.patch
Type: text/x-patch
Size: 1131 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100312/ebb452ac/attachment-0002.bin>


More information about the sssd-devel mailing list