# HG changeset patch
# User Will Fiveash <will.fiveash@oracle.com>
# Date 1280357251 18000
# Node ID e1e7ceb4453f464737d073e6da579d535dd1ab52
# Parent  2df46ea8f1b11b29be55f45b5e851fc74faac7d9
6937882 pam_krb5_prompter should deny all forms of password type prompts

diff -r 2df46ea8f1b1 -r e1e7ceb4453f usr/src/lib/pam_modules/krb5/krb5_authenticate.c
--- a/usr/src/lib/pam_modules/krb5/krb5_authenticate.c	Wed Jul 28 17:47:31 2010 -0500
+++ b/usr/src/lib/pam_modules/krb5/krb5_authenticate.c	Wed Jul 28 17:47:31 2010 -0500
@@ -394,8 +394,12 @@
 	 * disallow password prompts.
 	 */
 	for (i = 0; i < num_prompts; i++) {
-		if (prompt_type[i] == KRB5_PROMPT_TYPE_PASSWORD)
+		switch (prompt_type[i]) {
+		case KRB5_PROMPT_TYPE_PASSWORD:
+		case KRB5_PROMPT_TYPE_NEW_PASSWORD:
+		case KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN:
 			return (KRB5_LIBOS_CANTREADPWD);
+		}
 	}
 
 	if (num_prompts == 0) {