1From 497e0fc7010969759c8247f7013a89589c44234a Mon Sep 17 00:00:00 2001
2From: Kai Kang <kai.kang@windriver.com>
3Date: Thu, 17 Dec 2020 18:12:29 +0800
4Subject: [PATCH 3/8] check whether password expired with pam
5
6Introduce a new enum AuthResult type AUTH_PASSWD_EXPIRE. When user's
7password is expired, return it. Only work with pam.
8
9Upstream-Status: Submitted [https://sourceforge.net/p/lxdm/code/merge-requests/1/]
10
11Signed-off-by: Kai Kang <kai.kang@windriver.com>
12---
13 src/lxdm.h | 1 +
14 src/pam.c  | 4 ++++
15 2 files changed, 5 insertions(+)
16
17diff --git a/src/lxdm.h b/src/lxdm.h
18index 568573f..1c2f837 100644
19--- a/src/lxdm.h
20+++ b/src/lxdm.h
21@@ -41,6 +41,7 @@ enum AuthResult
22     AUTH_SUCCESS,
23     AUTH_BAD_USER,
24     AUTH_FAIL,
25+    AUTH_PASSWD_EXPIRE,
26     AUTH_PRIV,
27     AUTH_ERROR
28 };
29diff --git a/src/pam.c b/src/pam.c
30index 43bd687..16a36f0 100644
31--- a/src/pam.c
32+++ b/src/pam.c
33@@ -257,6 +257,10 @@ int lxdm_auth_user_authenticate(LXDM_AUTH *a,const char *user,const char *pass,i
34 			return AUTH_FAIL;
35 		}
36 		ret=pam_acct_mgmt(a->handle,PAM_SILENT);
37+		if (ret == PAM_NEW_AUTHTOK_REQD) {
38+			g_debug("user %s account has expired\n", user);
39+			return AUTH_PASSWD_EXPIRE;
40+		}
41 		if(ret!=PAM_SUCCESS)
42 		{
43 			g_debug("user %s acct mgmt fail with %d\n",user,ret);
44--
452.25.1
46
47