summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMario Abajo <marioabajo@gmail.com>2021-05-06 02:10:47 +0200
committerDenys Vlasenko <vda.linux@googlemail.com>2021-05-07 12:28:00 +0200
commit7de0ab21d939a5a304157f75918d0318a95261a3 (patch)
tree6a3e0132f57e05a84093f4a74ad259c63c0f15c6
parentac4a0b3be77f2b4280fd95849a0259e1351eeb43 (diff)
login: permit change expired password wit PAM
Signed-off-by: Mario Abajo <marioabajo@gmail.com> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
-rw-r--r--loginutils/login.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/loginutils/login.c b/loginutils/login.c
index 66ac7cf4c..ce87e318a 100644
--- a/loginutils/login.c
+++ b/loginutils/login.c
@@ -442,6 +442,9 @@ int login_main(int argc UNUSED_PARAM, char **argv)
}
/* check that the account is healthy */
pamret = pam_acct_mgmt(pamh, 0);
+ if (pamret == PAM_NEW_AUTHTOK_REQD) {
+ pamret = pam_chauthtok(pamh, PAM_CHANGE_EXPIRED_AUTHTOK);
+ }
if (pamret != PAM_SUCCESS) {
failed_msg = "acct_mgmt";
goto pam_auth_failed;