From ac9a90abf3a798a60dc09e326d0afecf4e95d6c8 Mon Sep 17 00:00:00 2001
From: David Mulder <dmulder@samba.org>
Date: Wed, 15 May 2024 10:21:38 -0600
Subject: [PATCH] Fix PIN and MFA Code pam prompts (#2759)

These are currently awkward on the command line
because the ': ' is missing.

Signed-off-by: David Mulder <dmulder@samba.org>
---
 unix_integration/pam_kanidm/src/pam/mod.rs | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/unix_integration/pam_kanidm/src/pam/mod.rs b/unix_integration/pam_kanidm/src/pam/mod.rs
index 7cddb7fdd..8b24e425e 100755
--- a/unix_integration/pam_kanidm/src/pam/mod.rs
+++ b/unix_integration/pam_kanidm/src/pam/mod.rs
@@ -342,7 +342,7 @@ impl PamHooks for PamKanidm {
                             return err;
                         }
                     }
-                    let cred = match conv.send(PAM_PROMPT_ECHO_OFF, "Code") {
+                    let cred = match conv.send(PAM_PROMPT_ECHO_OFF, "Code: ") {
                         Ok(password) => match password {
                             Some(cred) => cred,
                             None => {
@@ -414,7 +414,7 @@ impl PamHooks for PamKanidm {
                     let mut pin;
                     let mut confirm;
                     loop {
-                        pin = match conv.send(PAM_PROMPT_ECHO_OFF, "New PIN") {
+                        pin = match conv.send(PAM_PROMPT_ECHO_OFF, "New PIN: ") {
                             Ok(password) => match password {
                                 Some(cred) => cred,
                                 None => {
@@ -428,7 +428,7 @@ impl PamHooks for PamKanidm {
                             }
                         };
 
-                        confirm = match conv.send(PAM_PROMPT_ECHO_OFF, "Confirm PIN") {
+                        confirm = match conv.send(PAM_PROMPT_ECHO_OFF, "Confirm PIN: ") {
                             Ok(password) => match password {
                                 Some(cred) => cred,
                                 None => {
@@ -473,7 +473,7 @@ impl PamHooks for PamKanidm {
                     let cred = if let Some(cred) = consume_authtok {
                         cred
                     } else {
-                        match conv.send(PAM_PROMPT_ECHO_OFF, "PIN") {
+                        match conv.send(PAM_PROMPT_ECHO_OFF, "PIN: ") {
                             Ok(password) => match password {
                                 Some(cred) => cred,
                                 None => {