pam: Do not prevent root from changing auth token

SSSD · Dec 12, 2024 · 8602f82 · 8602f82
1 parent 132d208
commit 8602f82
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/src/sss_client/pam_sss.c b/src/sss_client/pam_sss.c
@@ -2756,9 +2756,6 @@ static int get_authtok_for_password_change(pam_handle_t *pamh,
     }
 
     if (pam_flags & PAM_PRELIM_CHECK) {
-        if (getuid() == 0 && !exp_data )
-            return PAM_SUCCESS;
-
         if (flags & PAM_CLI_FLAGS_USE_2FA
                 || (pi->otp_vendor != NULL && pi->otp_token_id != NULL
                         && pi->otp_challenge != NULL)) {