s3:winbind Fill in reject_reason from pass_oem_change() for local pw change.

When we changed the password against the local DB, this was not filled
in, but it is filled in for a remote password change over SAMR.

Andrew Bartlett

diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 801e42ffcbd4134058120c970c04017b120a82f1..4649172ae39a598c6e7038bde484ef75045be772 100644 (file)
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -1943,6 +1943,10 @@ enum winbindd_result winbindd_dual_pam_chauthtok(struct winbindd_domain *contact
                        new_lm_password.data, old_lanman_hash_enc.hash,
                        new_nt_password.data, old_nt_hash_enc.hash,
                        &rejectReason);
+               if (NT_STATUS_EQUAL(result, NT_STATUS_PASSWORD_RESTRICTION) ) {
+                       state->response->data.auth.reject_reason =
+                               rejectReason;
+               }
                goto done;
        }