>From 1d9a407e0779cfbc30ea5e60b2f5543c360362c7 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Wed, 7 Aug 2013 11:25:20 +0200 Subject: [PATCH 1/2] PAM: Check negcache when searching for fully qualified users, too --- src/responder/pam/pamsrv_cmd.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c index 4e3bd79c1f514fd9600ca360a7a205b7d4888e5f..645f9357b7c6fd70755930cfd3fde0c8b23419ca 100644 --- a/src/responder/pam/pamsrv_cmd.c +++ b/src/responder/pam/pamsrv_cmd.c @@ -806,6 +806,14 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd) ret = ENOENT; goto done; } + + ncret = sss_ncache_check_user(pctx->ncache, pctx->neg_timeout, + preq->domain, pd->user); + if (ncret == EEXIST) { + /* User found in the negative cache */ + ret = ENOENT; + goto done; + } } else { for (dom = preq->cctx->rctx->domains; dom; -- 1.8.3.1