Sophie

Sophie

distrib > Scientific%20Linux > 5x > x86_64 > media > main-src > by-pkgid > f2c9a24e570f82c24fd7074143d03478 > files > 32

nss_ldap-253-42.el5.src.rpm

When deciding whether or not to try to use ldap_modify to change the user's
password, skip it if we're in "pam_password exop_send_old", just as we would
for "pam_password exop".

diff -up pam_ldap-176/pam_ldap.c pam_ldap-176/pam_ldap.c
--- pam_ldap-176/pam_ldap.c	2007-10-04 10:07:32.000000000 -0400
+++ pam_ldap-176/pam_ldap.c	2007-10-04 10:07:40.000000000 -0400
@@ -3025,7 +3025,8 @@ _update_authtok (pam_handle_t *pamh,
       break;
     }				/* end switch */
 
-  if (session->conf->password_type != PASSWORD_EXOP)
+  if ((session->conf->password_type != PASSWORD_EXOP) &&
+      (session->conf->password_type != PASSWORD_EXOP_SEND_OLD))
     {
       rc = ldap_modify_s (session->ld, session->info->userdn, mods);
       if (rc != LDAP_SUCCESS)