[linux-pam] Always ask for old password if changing NIS account

[kukuk]

commit 5865f521f37846634f981582eaedad81abb08104
Author: Thorsten Kukuk <kukuk(a)thkukuk.de&gt;
Date:   Mon Nov 11 14:14:31 2013 +0100

    	Always ask for old password if changing NIS account
    
    	* modules/pam_unix/pam_unix_passwd.c (pam_sm_chauthtok): ask
    	for old password if NIS account.

 modules/pam_unix/pam_unix_passwd.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)
---
diff --git a/modules/pam_unix/pam_unix_passwd.c b/modules/pam_unix/pam_unix_passwd.c
index 9aae3b0..0cfc0f4 100644
--- a/modules/pam_unix/pam_unix_passwd.c
+++ b/modules/pam_unix/pam_unix_passwd.c
@@ -614,7 +614,8 @@ pam_sm_chauthtok(pam_handle_t *pamh, int flags, int argc, const char
**argv)
 
 		if (_unix_blankpasswd(pamh, ctrl, user)) {
 			return PAM_SUCCESS;
-		} else if (off(UNIX__IAMROOT, ctrl)) {
+		} else if (off(UNIX__IAMROOT, ctrl) ||
+			   (on(UNIX_NIS, ctrl) && _unix_comesfromsource(pamh, user, 0, 1))) {
 			/* instruct user what is happening */
 			if (asprintf(&Announce, _("Changing password for %s."),
 				user) < 0) {