https://bugzilla.novell.com/show_bug.cgi?id=779246
https://bugzilla.novell.com/show_bug.cgi?id=779246#c1
--- Comment #1 from Joschi Brauchle 2012-09-07 15:24:57 UTC ---
Digging in the source of krb5_child.c, it becomes clear that the function
"tgt_req_child" (line 860) has a default return value of "PAM_SYSTEM_ERR" (line
866), which also gets returned in the case of a wrong password (line 918 to
933).
As far as I understand, the module should return "PAM_AUTH_ERR" instead!
In comparison, "pam_krb5" also returns "PAM_SYSTEM_ERR" in case of an error
during Kerberos initialization, but then sets a default return code of
"PAM_AUTH_ERR" after the Kerberos initialization is successful (auth.c, line
214). Hence, a wrong password will automatically return "PAM_AUTH_ERR" there.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.