[patch] This patch handles the PAM_PRELIM_CHECK message but allows all else to err

pam_krb5-1.0-handle-prelim-check.patch (text/plain), 566 bytes, created by Andrew Sterling Hanenkamp on 2005-01-22 14:24:54 UTC

diff -urN pam_krb5.orig/pam_krb5_pass.c pam_krb5/pam_krb5_pass.c
--- pam_krb5.orig/pam_krb5_pass.c	2000-01-04 19:08:51.000000000 -0600
+++ pam_krb5/pam_krb5_pass.c	2005-01-22 16:05:41.000000000 -0600
@@ -41,6 +41,12 @@
     int debug = 0;
     int try_first_pass = 0, use_first_pass = 0;
 
+    if (flags & PAM_PRELIM_CHECK) {
+	// This is cheap, we just say, uh...yeah, we're good to go...
+	// This should probably make sure we can talk to the KDC or whatever.
+	return PAM_SUCCESS;
+    }
+    
     if (!(flags & PAM_UPDATE_AUTHTOK))
 	return PAM_AUTHTOK_ERR;