auth.c currently does not differentiate between non-success PAM return values. The greeter shows "authentication failed" for an expired password, even though the password was correct.
Minimum fix: send appropriate messages for common return codes to the greeter.
Letting the user actually change the password needs a larger architectural change.
auth.ccurrently does not differentiate between non-success PAM return values. The greeter shows "authentication failed" for an expired password, even though the password was correct.Minimum fix: send appropriate messages for common return codes to the greeter.
Letting the user actually change the password needs a larger architectural change.