- only permit a password prompt in attempt 3 if we didn't already   ask for a password
- only permit a password prompt in attempt 3 if we didn't already
  ask for a password

aadamowski/pam_krb5-krbldap,aadamowski/pam_krb5-krbldap