Hi, here are some more patches regarding the handling of the LDAP ppolicy control. Patch1: An error code of LDAP_INVALID_CREDENTIALS + a ppolicy control with the error PP_passwordExpired indicates an expire password as well. Patch2: When doing LDAP authentiation for PAM_PRELIM_CHECK, treat SDAP_AUTH_PW_EXPIRED as a successful authentication to be able to continue the the password change Patch3: Display a messages to the user when a password change is going to be initiated because of an expired password. feedback is of course welcome, Ralf

On Fri, Mar 12, 2010 at 04:45:27PM +0100, Ralf Haferkamp wrote: > Hi, > > here are some more patches regarding the handling of the LDAP ppolicy > control. > > Patch1: An error code of LDAP_INVALID_CREDENTIALS + a ppolicy control > with the error PP_passwordExpired indicates an expire password > as well. > Patch2: When doing LDAP authentiation for PAM_PRELIM_CHECK, treat > SDAP_AUTH_PW_EXPIRED as a successful authentication to be able to > continue the the password change > Patch3: Display a messages to the user when a password change is going to > be initiated because of an expired password. > > feedback is of course welcome, > Ralf ACK bye, Sumit

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkueJRcACgkQeiVVYja6o6PjxgCeNX7gAvnK6BojZ1+DPSd7049C v/QAnRKN5Q+aJ9buRVeQTZ0Z/lxKwX7v =BFPg -----END PGP SIGNATURE-----