rlm_mschap: fix up password change test

diff --git a/src/modules/rlm_mschap/auth_wbclient.c b/src/modules/rlm_mschap/auth_wbclient.c
index 4a7751a5d49e07e19f6a3f68d354f9001df823a8..a8361955bdf5cfe00a2fbb01780233e0f9fbb8de 100644 (file)
--- a/src/modules/rlm_mschap/auth_wbclient.c
+++ b/src/modules/rlm_mschap/auth_wbclient.c
@@ -155,8 +155,8 @@ int do_auth_wbclient(rlm_mschap_t *inst, REQUEST *request,
                /*
                 * The password needs to be changed, so set rcode appropriately.
                 */
-               if (error->nt_status & NT_STATUS_PASSWORD_EXPIRED ||
-                   error->nt_status & NT_STATUS_PASSWORD_MUST_CHANGE) {
+               if (error->nt_status == NT_STATUS_PASSWORD_EXPIRED ||
+                   error->nt_status == NT_STATUS_PASSWORD_MUST_CHANGE) {
                        rcode = -648;
                }