login: permit change expired password wit PAM

Signed-off-by: Mario Abajo <marioabajo@gmail.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

1 files changed, 3 insertions, 0 deletions

diff --git a/loginutils/login.c b/loginutils/login.c
index 66ac7cf4c..ce87e318a 100644
--- a/loginutils/login.c
+++ b/loginutils/login.c
@@ -442,6 +442,9 @@ int login_main(int argc UNUSED_PARAM, char **argv)
                 }
                 /* check that the account is healthy */
                 pamret = pam_acct_mgmt(pamh, 0);
+                if (pamret == PAM_NEW_AUTHTOK_REQD) {
+                        pamret = pam_chauthtok(pamh, PAM_CHANGE_EXPIRED_AUTHTOK);
+                }
                 if (pamret != PAM_SUCCESS) {
                         failed_msg = "acct_mgmt";
                         goto pam_auth_failed;