From: Thorsten Kukuk <kukuk@thkukuk.de>
Date: Mon, 11 Nov 2013 13:14:31 +0000 (+0100)
Subject: 	Always ask for old password if changing NIS account
X-Git-Tag: Linux-PAM-1_2_0~71
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5865f521f37846634f981582eaedad81abb08104;p=linux-pam

	Always ask for old password if changing NIS account

	* modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): ask
	for old password if NIS account.
---

diff --git a/modules/pam_unix/pam_unix_passwd.c b/modules/pam_unix/pam_unix_passwd.c
index 9aae3b03..0cfc0f4d 100644
--- a/modules/pam_unix/pam_unix_passwd.c
+++ b/modules/pam_unix/pam_unix_passwd.c
@@ -614,7 +614,8 @@ pam_sm_chauthtok(pam_handle_t *pamh, int flags, int argc, const char **argv)
 
 		if (_unix_blankpasswd(pamh, ctrl, user)) {
 			return PAM_SUCCESS;
-		} else if (off(UNIX__IAMROOT, ctrl)) {
+		} else if (off(UNIX__IAMROOT, ctrl) ||
+			   (on(UNIX_NIS, ctrl) && _unix_comesfromsource(pamh, user, 0, 1))) {
 			/* instruct user what is happening */
 			if (asprintf(&Announce, _("Changing password for %s."),
 				user) < 0) {