On Mon, Jun 17, 2013 at 10:38:51AM -0400, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/17/2013 08:14 AM, Pavel Březina wrote:
> On 06/17/2013 02:05 PM, Stephen Gallagher wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>>
>> On 06/17/2013 05:21 AM, Pavel Březina wrote:
>>>
>>
>> Nack
>>
>> You probably need to extend sdap_access_reply() in
>> ldap_access.c. Right now, it will call be_req_terminate() with
>> DP_ERR_FATAL unless the response type is PAM_SUCCESS or
>> PAM_PERM_DENIED. This differs from the behavior in the AD and IPA
>> environments.
>
> Nice catch. Thanks.
>
> New patch is attached.
>
Ack
Thank you for the review, Stephen.
Pushed to master.