On 06/17/2013 02:05 PM, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/17/2013 05:21 AM, Pavel Březina wrote:
>
Nack
You probably need to extend sdap_access_reply() in ldap_access.c.
Right now, it will call be_req_terminate() with DP_ERR_FATAL unless
the response type is PAM_SUCCESS or PAM_PERM_DENIED. This differs from
the behavior in the AD and IPA environments.
Nice catch. Thanks.
New patch is attached.