nsswitch: Add try_authok option to pam_winbind

github at samba.org github at samba.org
Fri Apr 20 13:18:15 UTC 2018

New comment by sathieu on Samba Github repository

I've tested that it works but please review carefully this code has no testsuite (I'm quite confident that my code doesn't change the behavior when the new option in not used) !

In particular (even before the patch):
- use_authtok implies use_first_pass
- I don't understand this:
                } else if (on(WINBIND_USE_AUTHTOK_ARG, ctrl)
                           && off(WINBIND__OLD_PASSWORD, ctrl)) {
                        return PAM_AUTHTOK_RECOVER_ERR;

More information about the samba-technical mailing list