Re: pam_ldapd problem

[Anton Helwart <ahelwart [at] math.uni-bielefeld.de>]

Hi again, 

On Fri, 8 Jun 2012 11:09:07 +0200
Anton Helwart <ahelwart@math.uni-bielefeld.de> wrote:

> If I run passwd and enter a wrong ldap password, I still get asked for
> a new password by cracklib. 
> 


I solved this with a small patch to pam.c (it's attached to this mail). 
Now pam_ldap.so returns PAM_AUTH_ERR when I enter a wrong password 
in the preliminary check and I can use something like this in 
/etc/pam.d/common-password: 

password        [success=ok auth_err=die new_authtok_reqd=ok \
ignore=ignore default=bad]      pam_ldap.so debug


But I'm no expert. Maybe someone can review my the patch and tell
me, if I'm doing something wrong. 


Greetings, 
Anton

Attachment: pam.c_patch
Description: Binary data

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/