From a1219d13c55c5c19f908e22969fca7a55982b14b Mon Sep 17 00:00:00 2001 From: Will Fiveash Date: Wed, 28 Jul 2010 17:47:31 -0500 Subject: 6937882 pam_krb5_prompter should deny all forms of password type prompts --- usr/src/lib/pam_modules/krb5/krb5_authenticate.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'usr/src') diff --git a/usr/src/lib/pam_modules/krb5/krb5_authenticate.c b/usr/src/lib/pam_modules/krb5/krb5_authenticate.c index 28194f1873..534c8ba727 100644 --- a/usr/src/lib/pam_modules/krb5/krb5_authenticate.c +++ b/usr/src/lib/pam_modules/krb5/krb5_authenticate.c @@ -394,8 +394,12 @@ pam_krb5_prompter( * disallow password prompts. */ for (i = 0; i < num_prompts; i++) { - if (prompt_type[i] == KRB5_PROMPT_TYPE_PASSWORD) + switch (prompt_type[i]) { + case KRB5_PROMPT_TYPE_PASSWORD: + case KRB5_PROMPT_TYPE_NEW_PASSWORD: + case KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN: return (KRB5_LIBOS_CANTREADPWD); + } } if (num_prompts == 0) { -- cgit v1.2.3