From 5b1eb22efacb626c6e25b38522df2efa2d359208 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Fri, 27 Nov 2015 14:31:54 +0100 Subject: [PATCH] KRB5: Handle preauth request timeout more gracefully The error itself doesn't matter that much, because pam_sss.so handles all preauth errors gracefully already, but the issue triggered a loud and confusing debug message in the logs. --- src/providers/krb5/krb5_auth.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c index 7b7a16a612332639aa474a7ebea6b966df18f08f..7657b4ded69351e2caa4c2554d8a62e504b94f34 100644 --- a/src/providers/krb5/krb5_auth.c +++ b/src/providers/krb5/krb5_auth.c @@ -826,6 +826,11 @@ static void krb5_auth_done(struct tevent_req *subreq) search_srv = kr->srv; break; } + case SSS_PAM_PREAUTH: + state->pam_status = PAM_CRED_UNAVAIL; + state->dp_err = DP_ERR_OK; + ret = EOK; + goto done; default: DEBUG(SSSDBG_CRIT_FAILURE, "Unexpected PAM task\n"); ret = EINVAL; -- 2.4.3