Ignore PAM_NEW_AUTHTOK_REQD and PAM_AUTHTOK_EXPIRED errors from

pam_acct_mgmt() if authentication is disabled for the user.
Bug #843
This commit is contained in:
Todd C. Miller
2018-07-26 12:31:29 -06:00
parent dc1e0e7168
commit 394524fd5d
6 changed files with 19 additions and 9 deletions

View File

@@ -168,7 +168,7 @@ bsdauth_verify(struct passwd *pw, char *prompt, sudo_auth *auth, struct sudo_con
}
int
bsdauth_approval(struct passwd *pw, sudo_auth *auth)
bsdauth_approval(struct passwd *pw, sudo_auth *auth, bool exempt)
{
struct bsdauth_state *state = auth->data;
debug_decl(bsdauth_approval, SUDOERS_DEBUG_AUTH)