Re: [SSSD] [PATCH] Various fixes/improvment to ldap ppolicy handling

Hi, here are some more patches regarding the handling of the LDAP ppolicy control. Patch1: An error code of LDAP_INVALID_CREDENTIALS + a ppolicy control with the error PP_passwordExpired indicates an expire password as well. Patch2: When doing LDAP authentiation for PAM_PRELIM_CHECK, treat SDAP_AUTH_PW_EXPIRED as a successful authentication to be able to continue the the password change Patch3: Display a messages to the user when a password change is going to be initiated because of an expired password. feedback is of course welcome, Ralf