1# Test deferring handling of expired passwords. -*- conf -*- 2# 3# Written by Russ Allbery <eagle@eyrie.org> 4# Copyright 2014, 2020 Russ Allbery <eagle@eyrie.org> 5# Copyright 2010-2011 6# The Board of Trustees of the Leland Stanford Junior University 7# 8# SPDX-License-Identifier: BSD-3-clause or GPL-1+ 9 10[options] 11 auth = defer_pwchange use_first_pass debug 12 account = ignore_k5login debug 13 password = ignore_k5login use_first_pass debug 14 session = debug 15 16[run] 17 authenticate = PAM_SUCCESS 18 acct_mgmt = PAM_NEW_AUTHTOK_REQD 19 chauthtok(PRELIM_CHECK) = PAM_SUCCESS 20 chauthtok(UPDATE_AUTHTOK) = PAM_SUCCESS 21 acct_mgmt = PAM_SUCCESS 22 open_session = PAM_SUCCESS 23 close_session = PAM_SUCCESS 24 25[prompts] 26 echo_off = Current Kerberos password: |%p 27 echo_off = Enter new Kerberos password: |%n 28 echo_off = Retype new Kerberos password: |%n 29 30[output] 31 DEBUG pam_sm_authenticate: entry 32 DEBUG (user %u) attempting authentication as %0 33 DEBUG (user %u) krb5_get_init_creds_password: Password has expired 34 DEBUG (user %u) expired account, deferring failure 35 INFO user %u authenticated as %0 (expired) 36 DEBUG pam_sm_authenticate: exit (success) 37 DEBUG pam_sm_acct_mgmt: entry 38 INFO user %u account password is expired 39 DEBUG pam_sm_acct_mgmt: exit (failure) 40 DEBUG pam_sm_chauthtok: entry (prelim) 41 DEBUG (user %u) attempting authentication as %0 for kadmin/changepw 42 DEBUG pam_sm_chauthtok: exit (success) 43 DEBUG pam_sm_chauthtok: entry (update) 44 INFO user %u changed Kerberos password 45 DEBUG (user %u) obtaining credentials with new password 46 DEBUG (user %u) attempting authentication as %0 47 INFO user %u authenticated as %0 48 DEBUG /^\(user %u\) temporarily storing credentials in /tmp/krb5cc_pam_/ 49 DEBUG pam_sm_chauthtok: exit (success) 50 DEBUG pam_sm_acct_mgmt: entry 51 DEBUG (user %u) retrieving principal from cache 52 DEBUG pam_sm_acct_mgmt: exit (success) 53 DEBUG pam_sm_open_session: entry 54 DEBUG /^\(user %u\) initializing ticket cache FILE:/tmp/krb5cc_/ 55 DEBUG pam_sm_open_session: exit (success) 56 DEBUG pam_sm_close_session: entry 57 DEBUG pam_sm_close_session: exit (success) 58