Luke Howard 070d0cf928 krb5: krb5_get_init_creds_opt_set_change_password_prompt incomplete (#322) ...

krb5_get_init_creds_opt_set_change_password_prompt() was being ignored by
krb5_init_creds_step() which broke pam_krb5 tests. MIT doesn't handle password
expiration within krb5_init_creds_step(), instead deferring to higher level
functions such as krb5_get_init_creds_password(). However, Heimdal kinit uses
krb5_init_creds_step() directly and thus requires this behaviour to be
implemented to pass its own tests.

2018-12-23 16:59:25 +11:00

71 KiB

Raw Blame History

View Raw