>From 89baa40069804e051c07c09c57c75899bcb8a087 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Wed, 19 Sep 2012 10:27:58 +0200 Subject: [PATCH] KRB5 child: Don't return System Error on empty password https://fedorahosted.org/sssd/ticket/1310 --- src/providers/krb5/krb5_child.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c index dc2e3117db0508df8a667dd9a3ab3323856d1b5c..9665f45ba2cdca9a8a19e7da24354e624ae33f7e 100644 --- a/src/providers/krb5/krb5_child.c +++ b/src/providers/krb5/krb5_child.c @@ -933,6 +933,9 @@ static int kerr_to_status(krb5_error_code kerr) KRB5_CHILD_DEBUG(SSSDBG_CRIT_FAILURE, kerr); switch (kerr) { + case KRB5_LIBOS_CANTREADPWD: + pam_status = PAM_CRED_UNAVAIL; + break; case KRB5_KDC_UNREACH: pam_status = PAM_AUTHINFO_UNAVAIL; break; @@ -942,6 +945,7 @@ static int kerr_to_status(krb5_error_code kerr) case KRB5KRB_AP_ERR_BAD_INTEGRITY: pam_status = PAM_AUTH_ERR; break; + case KRB5_PREAUTH_FAILED: case KRB5KDC_ERR_PREAUTH_FAILED: pam_status = PAM_CRED_ERR; break; -- 1.7.11.4