From eb622ed44fcf72e5ff550e82161e9d54cc623b33 Mon Sep 17 00:00:00 2001
From: ysf <ich@youssef.de>
Date: Wed, 2 Mar 2022 21:05:34 +0100
Subject: [PATCH] VeyonAuthHelper: add account validity check

Up to now disabled or expired accounts inadvertently have been treated
as properly authenticated.

(cherry picked from commit 2043dd04a2296e38bb8c54a500a2155aa84c574f)
---
 plugins/platform/linux/auth-helper/VeyonAuthHelper.cpp | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/plugins/platform/linux/auth-helper/VeyonAuthHelper.cpp b/plugins/platform/linux/auth-helper/VeyonAuthHelper.cpp
index 809bea21d..ca5f9cc1e 100644
--- a/plugins/platform/linux/auth-helper/VeyonAuthHelper.cpp
+++ b/plugins/platform/linux/auth-helper/VeyonAuthHelper.cpp
@@ -92,6 +92,14 @@ int main()
 		{
 			printf( "pam_authenticate: %s\n", pam_strerror( pamh, err ) );
 		}
+        else
+        {
+            err = pam_acct_mgmt( pamh, PAM_SILENT );
+            if( err != PAM_SUCCESS )
+            {
+                printf( "pam_acct_mgmt: %s\n", pam_strerror( pamh, err ) );
+            }
+        }
 	}
 	else
 	{