1*bf6873c5SCy Schubert# Test deferring handling of expired passwords. -*- conf -*- 2*bf6873c5SCy Schubert# 3*bf6873c5SCy Schubert# Written by Russ Allbery <eagle@eyrie.org> 4*bf6873c5SCy Schubert# Copyright 2014, 2020 Russ Allbery <eagle@eyrie.org> 5*bf6873c5SCy Schubert# Copyright 2010-2011 6*bf6873c5SCy Schubert# The Board of Trustees of the Leland Stanford Junior University 7*bf6873c5SCy Schubert# 8*bf6873c5SCy Schubert# SPDX-License-Identifier: BSD-3-clause or GPL-1+ 9*bf6873c5SCy Schubert 10*bf6873c5SCy Schubert[options] 11*bf6873c5SCy Schubert auth = defer_pwchange use_first_pass 12*bf6873c5SCy Schubert account = ignore_k5login 13*bf6873c5SCy Schubert password = ignore_k5login use_first_pass 14*bf6873c5SCy Schubert 15*bf6873c5SCy Schubert[run] 16*bf6873c5SCy Schubert authenticate = PAM_SUCCESS 17*bf6873c5SCy Schubert acct_mgmt = PAM_NEW_AUTHTOK_REQD 18*bf6873c5SCy Schubert chauthtok(PRELIM_CHECK) = PAM_SUCCESS 19*bf6873c5SCy Schubert chauthtok(UPDATE_AUTHTOK) = PAM_SUCCESS 20*bf6873c5SCy Schubert acct_mgmt = PAM_SUCCESS 21*bf6873c5SCy Schubert open_session = PAM_SUCCESS 22*bf6873c5SCy Schubert close_session = PAM_SUCCESS 23*bf6873c5SCy Schubert 24*bf6873c5SCy Schubert[prompts] 25*bf6873c5SCy Schubert echo_off = Current Kerberos password: |%p 26*bf6873c5SCy Schubert echo_off = Enter new Kerberos password: |%n 27*bf6873c5SCy Schubert echo_off = Retype new Kerberos password: |%n 28*bf6873c5SCy Schubert 29*bf6873c5SCy Schubert[output] 30*bf6873c5SCy Schubert INFO user %u authenticated as %0 (expired) 31*bf6873c5SCy Schubert INFO user %u account password is expired 32*bf6873c5SCy Schubert INFO user %u changed Kerberos password 33*bf6873c5SCy Schubert INFO user %u authenticated as %0 34