Whoops - tested that patch out, it doesn't work. We need to return an actual failure here in order to let the stack DTRT, instead of returning PAM_SUCCESS or PAM_IGNORE. This revision of the patch does that.
It still doesn't work in my tests, though; still trying to sort out why that is...
Whoops - tested that patch out, it doesn't work. We need to return an actual failure here in order to let the stack DTRT, instead of returning PAM_SUCCESS or PAM_IGNORE. This revision of the patch does that.
It still doesn't work in my tests, though; still trying to sort out why that is...