Hello,

please see attached patch, which is amended Daniel Gollubs' patch from thread
[SSSD] [PATCH] PAM: Add domains= option to pam_sss (https://lists.fedorahosted.org/pipermail/sssd-devel/2014-July/020867.html). 

I have just fixed nitpick found by Jakub and rebased it on top of previous patch in this thread. 

and I also changed this:
Because I think dom->name would be uninitialized. However, I haven't tested this patch.
@@ -836,12 +867,22 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd)
             ret = ENOENT;
             goto done;
         }

        /* skip this domain if not requested */
-        if (!is_domain_requested(pd, dom->name)) {
+        if (!is_domain_requested(pd, pd->domain)) {
	    ret = ENOENT;
	    goto done;
	}


Thanks!


On 09/27/2014 12:39 PM, Pavel Reichl wrote:
Attached patch now contains both options.

Thanks.


On 09/25/2014 03:57 PM, Pavel Reichl wrote:
Hello,

please see attached patch which adds first of two options proposed in https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM

Thanks!


_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel