From eb8b4679152583f68d635c837353adbe1e4dbac7 Mon Sep 17 00:00:00 2001
From: Michael Boelen <michael.boelen@cisofy.com>
Date: Wed, 24 Jan 2018 19:41:15 +0100
Subject: [PATCH] Add TODO for PAM checks on AUTH-9286

---
 include/tests_authentication | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/include/tests_authentication b/include/tests_authentication
index 7ce2dc21..dc01969e 100644
--- a/include/tests_authentication
+++ b/include/tests_authentication
@@ -776,7 +776,11 @@
     # Description : Check user password aging
     # Notes       : MIN = minimum age, avoid rotation of passwords too quickly
     #             : MAX = maximum age, ensure regular change of passwords
-    if [ -f ${ROOTDIR}etc/login.defs ]; then PREQS_MET="YES"; else PREQS_MET="NO"; fi
+    PREQS_MET="NO"
+    if [ -f ${ROOTDIR}etc/login.defs ]; then
+        PREQS_MET="YES"
+        # Future TODO: check if PAM overrule these settings
+    fi
     Register --test-no AUTH-9286 --preqs-met ${PREQS_MET} --weight L --network NO --category security --description "Checking user password aging"
     if [ ${SKIPTEST} -eq 0 ]; then
         LogText "Test: Checking PASS_MIN_DAYS option in ${ROOTDIR}etc/login.defs"