1*bf6873c5SCy Schubert# Test deferring handling of expired passwords. -*- conf -*- 2*bf6873c5SCy Schubert# 3*bf6873c5SCy Schubert# Written by Russ Allbery <eagle@eyrie.org> 4*bf6873c5SCy Schubert# Copyright 2014, 2020 Russ Allbery <eagle@eyrie.org> 5*bf6873c5SCy Schubert# Copyright 2010-2011 6*bf6873c5SCy Schubert# The Board of Trustees of the Leland Stanford Junior University 7*bf6873c5SCy Schubert# 8*bf6873c5SCy Schubert# SPDX-License-Identifier: BSD-3-clause or GPL-1+ 9*bf6873c5SCy Schubert 10*bf6873c5SCy Schubert[options] 11*bf6873c5SCy Schubert auth = defer_pwchange use_first_pass debug 12*bf6873c5SCy Schubert account = ignore_k5login debug 13*bf6873c5SCy Schubert password = ignore_k5login use_first_pass debug 14*bf6873c5SCy Schubert session = debug 15*bf6873c5SCy Schubert 16*bf6873c5SCy Schubert[run] 17*bf6873c5SCy Schubert authenticate = PAM_SUCCESS 18*bf6873c5SCy Schubert acct_mgmt = PAM_NEW_AUTHTOK_REQD 19*bf6873c5SCy Schubert chauthtok(PRELIM_CHECK) = PAM_SUCCESS 20*bf6873c5SCy Schubert chauthtok(UPDATE_AUTHTOK) = PAM_SUCCESS 21*bf6873c5SCy Schubert acct_mgmt = PAM_SUCCESS 22*bf6873c5SCy Schubert open_session = PAM_SUCCESS 23*bf6873c5SCy Schubert close_session = PAM_SUCCESS 24*bf6873c5SCy Schubert 25*bf6873c5SCy Schubert[prompts] 26*bf6873c5SCy Schubert echo_off = Current Kerberos password: |%p 27*bf6873c5SCy Schubert echo_off = Enter new Kerberos password: |%n 28*bf6873c5SCy Schubert echo_off = Retype new Kerberos password: |%n 29*bf6873c5SCy Schubert 30*bf6873c5SCy Schubert[output] 31*bf6873c5SCy Schubert DEBUG pam_sm_authenticate: entry 32*bf6873c5SCy Schubert DEBUG (user %u) attempting authentication as %0 33*bf6873c5SCy Schubert DEBUG (user %u) krb5_get_init_creds_password: Password has expired 34*bf6873c5SCy Schubert DEBUG (user %u) expired account, deferring failure 35*bf6873c5SCy Schubert INFO user %u authenticated as %0 (expired) 36*bf6873c5SCy Schubert DEBUG pam_sm_authenticate: exit (success) 37*bf6873c5SCy Schubert DEBUG pam_sm_acct_mgmt: entry 38*bf6873c5SCy Schubert INFO user %u account password is expired 39*bf6873c5SCy Schubert DEBUG pam_sm_acct_mgmt: exit (failure) 40*bf6873c5SCy Schubert DEBUG pam_sm_chauthtok: entry (prelim) 41*bf6873c5SCy Schubert DEBUG (user %u) attempting authentication as %0 for kadmin/changepw 42*bf6873c5SCy Schubert DEBUG pam_sm_chauthtok: exit (success) 43*bf6873c5SCy Schubert DEBUG pam_sm_chauthtok: entry (update) 44*bf6873c5SCy Schubert INFO user %u changed Kerberos password 45*bf6873c5SCy Schubert DEBUG (user %u) obtaining credentials with new password 46*bf6873c5SCy Schubert DEBUG (user %u) attempting authentication as %0 47*bf6873c5SCy Schubert INFO user %u authenticated as %0 48*bf6873c5SCy Schubert DEBUG /^\(user %u\) temporarily storing credentials in /tmp/krb5cc_pam_/ 49*bf6873c5SCy Schubert DEBUG pam_sm_chauthtok: exit (success) 50*bf6873c5SCy Schubert DEBUG pam_sm_acct_mgmt: entry 51*bf6873c5SCy Schubert DEBUG (user %u) retrieving principal from cache 52*bf6873c5SCy Schubert DEBUG pam_sm_acct_mgmt: exit (success) 53*bf6873c5SCy Schubert DEBUG pam_sm_open_session: entry 54*bf6873c5SCy Schubert DEBUG /^\(user %u\) initializing ticket cache FILE:/tmp/krb5cc_/ 55*bf6873c5SCy Schubert DEBUG pam_sm_open_session: exit (success) 56*bf6873c5SCy Schubert DEBUG pam_sm_close_session: entry 57*bf6873c5SCy Schubert DEBUG pam_sm_close_session: exit (success) 58