support more PAM status codes over the nslcd protocol

git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1440 ef36b2f9-881f-0410-afb5-c4e39611909c

2 files changed, 4 insertions, 0 deletions

diff --git a/nslcd.h b/nslcd.h
index d9aa3b8..e87ff04 100644
--- a/nslcd.h
+++ b/nslcd.h
@@ -252,8 +252,10 @@
 #define NSLCD_PAM_NEW_AUTHTOK_REQD   12 /* Password expired */
 #define NSLCD_PAM_ACCT_EXPIRED       13 /* Account expired */
 #define NSLCD_PAM_SESSION_ERR        14 /* Cannot make/remove session record */
+#define NSLCD_PAM_AUTHTOK_ERR        20 /* Authentication token manipulation error */
 #define NSLCD_PAM_AUTHTOK_DISABLE_AGING 23 /* Password aging disabled */
 #define NSLCD_PAM_IGNORE             25 /* Ignore module */
 #define NSLCD_PAM_ABORT              26 /* Fatal error */
+#define NSLCD_PAM_AUTHTOK_EXPIRED    27 /* authentication token has expired */
 
 #endif /* not _NSLCD_H */
diff --git a/pam/pam.c b/pam/pam.c
index 2193eaa..2e61f74 100644
--- a/pam/pam.c
+++ b/pam/pam.c
@@ -239,9 +239,11 @@ static int nslcd2pam_rc(pam_handle_t *pamh,int rc)
     map(PAM_NEW_AUTHTOK_REQD);
     map(PAM_ACCT_EXPIRED);
     map(PAM_SESSION_ERR);
+    map(PAM_AUTHTOK_ERR);
     map(PAM_AUTHTOK_DISABLE_AGING);
     map(PAM_IGNORE);
     map(PAM_ABORT);
+    map(PAM_AUTHTOK_EXPIRED);
     default:
       pam_syslog(pamh,LOG_ERR,"unknown NSLCD_PAM_* code returned: %d",rc);
       return PAM_ABORT;