do not attempt to change password as root when changing an expired password

git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1445 ef36b2f9-881f-0410-afb5-c4e39611909c

1 files changed, 1 insertions, 1 deletions

diff --git a/pam/pam.c b/pam/pam.c
index 2e61f74..2fe6023 100644
--- a/pam/pam.c
+++ b/pam/pam.c
@@ -563,7 +563,7 @@ int pam_sm_chauthtok(pam_handle_t *pamh,int flags,int argc,const char **argv)
     /* see if the user is trying to modify another user's password */
     pwent=getpwnam(username);
     myuid=getuid();
-    if ((pwent!=NULL)&&(pwent->pw_uid!=myuid))
+    if ((pwent!=NULL)&&(pwent->pw_uid!=myuid)&&(!(flags&PAM_CHANGE_EXPIRED_AUTHTOK)))
     {
       /* we are root so we can test if nslcd will allow us to change the
          user's password without the admin password */