Hello community, here is the log from the commit of package pam-modules checked in at Wed Dec 3 16:32:21 CET 2008. -------- --- pam-modules/pam-modules.changes 2008-11-21 14:19:20.000000000 +0100 +++ /mounts/work_src_done/STABLE/pam-modules/pam-modules.changes 2008-12-02 16:33:19.097101000 +0100 @@ -1,0 +2,6 @@ +Tue Dec 2 16:30:36 CET 2008 - mc@suse.de + +- let unix2_chkpwd call pam_setcred(PAM_REFRESH_CRED) + (bnc#420060) + +------------------------------------------------------------------- calling whatdependson for head-i586 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam-modules.spec ++++++ --- /var/tmp/diff_new_pack.F23847/_old 2008-12-03 16:32:11.000000000 +0100 +++ /var/tmp/diff_new_pack.F23847/_new 2008-12-03 16:32:11.000000000 +0100 @@ -29,7 +29,7 @@ Group: System/Libraries AutoReqProv: on Version: 11.1 -Release: 3 +Release: 4 Summary: Additional PAM Modules Source0: pam_unix2-2.7.1.tar.bz2 Source1: pam_pwcheck-3.12.3.tar.bz2 @@ -127,6 +127,9 @@ %attr(644,root,root) %doc %{_mandir}/man8/unix2_chkpwd.8.gz %changelog +* Tue Dec 02 2008 mc@suse.de +- let unix2_chkpwd call pam_setcred(PAM_REFRESH_CRED) + (bnc#420060) * Fri Nov 21 2008 kukuk@suse.de - pam_pwcheck: Fix handling of empty passwords [bnc#447483] * Fri Nov 21 2008 kukuk@suse.de ++++++ unix2_chkpwd.c ++++++ --- /var/tmp/diff_new_pack.F23847/_old 2008-12-03 16:32:11.000000000 +0100 +++ /var/tmp/diff_new_pack.F23847/_new 2008-12-03 16:32:11.000000000 +0100 @@ -145,6 +145,20 @@ _log_err(LOG_ERR, "pam_authenticate(%s, %s): %s", service, user, pam_strerror(pamh, err)); + + if (err == PAM_SUCCESS) + { + int err2 = pam_setcred(pamh, PAM_REFRESH_CRED); + if (err2 != PAM_SUCCESS) + _log_err(LOG_ERR, "pam_setcred(%s, %s): %s", + service, user, + pam_strerror(pamh, err2)); + /* + * ignore errors on refresh credentials. + * If this did not work we use the old once. + */ + } + pam_end(pamh, err); if (err != PAM_SUCCESS) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org