Title: #266: IPA: Fix the PAM error code that auth code expects to start migration
To support PKINIT, we now return PAM_NO_MODULE_DATA when the krb5_child
process returns ERR_NO_AUTH_METHOD_AVAILABLE. Previously, we used to return
PAM_CRED_ERR which the IPA auth code expects in order to start password
This patch syncs the two again.
To reproduce, add an ipa user without password:
ipa user-add migration_user Then try to log in as that user:
The IPA auth code should be then executed.
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/266/head:pr266
git checkout pr266