winbind: Fix 100% loop
commitb6f1310d4506fd3ea16c75c7bce7df87ddf0de7b
authorVolker Lendecke <vl@samba.org>
Fri, 28 Aug 2015 10:33:13 +0000 (28 12:33 +0200)
committerKarolin Seeger <kseeger@samba.org>
Mon, 5 Oct 2015 07:40:10 +0000 (5 09:40 +0200)
tree8fc3dbafc28c91b9c17e6f299aaff5f9b06cca9e
parentf9a820a5c6bb02c14875a4c1f9b2877c8bd6bf58
winbind: Fix 100% loop

Thanks to "L.P.H. van Belle" <belle@bazuin.nl>
for help in reproducing the issue.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11038

From the bug report:

"With e551cdb37d3e re-applied the problem is gone with
and without kerberos. Moreover, if correctly configured,
sshd requests you to change your password at logon time,
which then succeeds.

The problem why I had this reverted was because I had not
gone through the pain to correctly configure all the PAM
services (in particular the "account" section), leading
to sshd letting the user in when the password had to be
changed."

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit e551cdb37d3e8cfb155bc33f9b162761c8d60889)

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri Oct  2 00:16:29 CEST 2015 on sn-devel-104

(cherry picked from commit e524ab9f7ee9f4aff50dd5bc42312f9000bf1c6e)
source3/libads/kerberos.c