ITS#8080 nssov: allow user pwmod without pwdmgr configured

This commit is contained in:
Ryan Tandy 2015-03-16 04:53:32 +00:00 committed by Howard Chu
parent 957d4770eb
commit 0200c6d92c

View File

@ -770,13 +770,8 @@ int pam_pwmod(nssov_info *ni,TFILE *fp,Operation *op,uid_t calleruid)
goto done;
}
if (BER_BVISEMPTY(&ni->ni_pam_pwdmgr_dn)) {
Debug(LDAP_DEBUG_TRACE,"nssov_pam_pwmod(), %s\n",
"pwdmgr not configured", 0, 0);
ber_str2bv("pwdmgr not configured", 0, 0, &pi.msg);
rc = NSLCD_PAM_PERM_DENIED;
goto done;
} else if (!ber_bvcmp(&pi.dn, &ni->ni_pam_pwdmgr_dn)) {
if (!BER_BVISEMPTY(&ni->ni_pam_pwdmgr_dn) &&
!ber_bvcmp(&pi.dn, &ni->ni_pam_pwdmgr_dn)) {
if (calleruid != 0) {
Debug(LDAP_DEBUG_TRACE,"nssov_pam_pwmod(): %s\n",
"caller is not root", 0, 0);