diff options
| author | Will Fiveash <will.fiveash@oracle.com> | 2010-07-28 17:47:31 -0500 |
|---|---|---|
| committer | Will Fiveash <will.fiveash@oracle.com> | 2010-07-28 17:47:31 -0500 |
| commit | a1219d13c55c5c19f908e22969fca7a55982b14b (patch) | |
| tree | fd66563fa958ca77407a899380a82d1054fdf840 /usr/src | |
| parent | 488060a6285c53d78d4e5360e7db00d6d544d960 (diff) | |
| download | illumos-joyent-a1219d13c55c5c19f908e22969fca7a55982b14b.tar.gz | |
6937882 pam_krb5_prompter should deny all forms of password type prompts
Diffstat (limited to 'usr/src')
| -rw-r--r-- | usr/src/lib/pam_modules/krb5/krb5_authenticate.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/usr/src/lib/pam_modules/krb5/krb5_authenticate.c b/usr/src/lib/pam_modules/krb5/krb5_authenticate.c index 28194f1873..534c8ba727 100644 --- a/usr/src/lib/pam_modules/krb5/krb5_authenticate.c +++ b/usr/src/lib/pam_modules/krb5/krb5_authenticate.c @@ -394,8 +394,12 @@ pam_krb5_prompter( * disallow password prompts. */ for (i = 0; i < num_prompts; i++) { - if (prompt_type[i] == KRB5_PROMPT_TYPE_PASSWORD) + switch (prompt_type[i]) { + case KRB5_PROMPT_TYPE_PASSWORD: + case KRB5_PROMPT_TYPE_NEW_PASSWORD: + case KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN: return (KRB5_LIBOS_CANTREADPWD); + } } if (num_prompts == 0) { |