From 5d220353e80c4dcecce175c2182d09b74e52134b Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 25 Mar 2015 12:04:57 +0100 Subject: [PATCH 11/14] krb5: try delayed online authentication only for single factor auth --- src/providers/krb5/krb5_auth.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c index 162f6a1572238591a06f1e314a42810c8df029b1..7aa11c46515d7560cf73b4e21ffaa66472e9db60 100644 --- a/src/providers/krb5/krb5_auth.c +++ b/src/providers/krb5/krb5_auth.c @@ -207,6 +207,13 @@ static void krb5_auth_cache_creds(struct krb5_ctx *krb5_ctx, const char *password = NULL; errno_t ret; + if (sss_authtok_get_type(pd->authtok) != SSS_AUTHTOK_TYPE_PASSWORD) { + DEBUG(SSSDBG_MINOR_FAILURE, + "Delayed authentication is only available for password " \ + "authentication (single factor).\n"); + return; + } + ret = sss_authtok_get_password(pd->authtok, &password, NULL); if (ret != EOK) { DEBUG(SSSDBG_FATAL_FAILURE, -- 2.1.0