From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Sat, 5 Feb 2005 18:01:55 +0000 (+0000)
Subject: Give user a clue when there is a missing "account" section in the PAM config.
X-Git-Tag: SUDO_1_7_0~728
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6548e82f20762e6a735e0e353ddee5adeb3fc393;p=sudo

Give user a clue when there is a missing "account" section in the PAM config.
---

diff --git a/auth/pam.c b/auth/pam.c
index 94e85ea4f..f4b1b7649 100644
--- a/auth/pam.c
+++ b/auth/pam.c
@@ -139,8 +139,9 @@ pam_verify(pw, prompt, auth)
 			"Password expired, contact your system administrator");
 		    return(AUTH_FATAL);
 		case PAM_ACCT_EXPIRED:
-		    log_error(NO_EXIT|NO_MAIL,
-			"Account expired, contact your system administrator");
+		    log_error(NO_EXIT|NO_MAIL, "%s %s",
+			"Account expired or PAM config lacks an \"account\"",
+			"section for sudo, contact your system administrator");
 		    return(AUTH_FATAL);
 	    }
 	    /* FALLTHROUGH */