From 89f9598e19000fed30c1069eec01b094eeae0377 Mon Sep 17 00:00:00 2001
From: Petr Cech <pcech@redhat.com>
Date: Tue, 2 Aug 2016 10:11:14 +0200
Subject: [PATCH 74/74] LDAP: Fixing wrong pam error code for passwd

This patch adds right pam error code for sssd offline state.

Resolves:
https://fedorahosted.org/sssd/ticket/3109
---
 src/providers/ldap/ldap_auth.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/providers/ldap/ldap_auth.c b/src/providers/ldap/ldap_auth.c
index 107f6ded1a903904e088f0b6b0320fe82a52af52..35f16b0d4a6f8e566b0cf63b65ba46f31e7c1bcd 100644
--- a/src/providers/ldap/ldap_auth.c
+++ b/src/providers/ldap/ldap_auth.c
@@ -1101,6 +1101,11 @@ sdap_pam_chpass_handler_send(TALLOC_CTX *mem_ctx,
     state->auth_ctx = auth_ctx;
     state->ev = params->ev;
 
+    if (be_is_offline(state->be_ctx)) {
+        pd->pam_status = PAM_AUTHINFO_UNAVAIL;
+        goto immediately;
+    }
+
     if ((pd->priv == 1) && (pd->cmd == SSS_PAM_CHAUTHTOK_PRELIM) &&
         (sss_authtok_get_type(pd->authtok) != SSS_AUTHTOK_TYPE_PASSWORD)) {
         DEBUG(SSSDBG_CONF_SETTINGS,
-- 
2.4.11