From 5865f521f37846634f981582eaedad81abb08104 Mon Sep 17 00:00:00 2001 From: Thorsten Kukuk Date: Mon, 11 Nov 2013 14:14:31 +0100 Subject: [PATCH] Always ask for old password if changing NIS account * modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): ask for old password if NIS account. --- modules/pam_unix/pam_unix_passwd.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modules/pam_unix/pam_unix_passwd.c b/modules/pam_unix/pam_unix_passwd.c index 9aae3b03..0cfc0f4d 100644 --- a/modules/pam_unix/pam_unix_passwd.c +++ b/modules/pam_unix/pam_unix_passwd.c @@ -614,7 +614,8 @@ pam_sm_chauthtok(pam_handle_t *pamh, int flags, int argc, const char **argv) if (_unix_blankpasswd(pamh, ctrl, user)) { return PAM_SUCCESS; - } else if (off(UNIX__IAMROOT, ctrl)) { + } else if (off(UNIX__IAMROOT, ctrl) || + (on(UNIX_NIS, ctrl) && _unix_comesfromsource(pamh, user, 0, 1))) { /* instruct user what is happening */ if (asprintf(&Announce, _("Changing password for %s."), user) < 0) { -- 2.40.0