URL:
https://github.com/SSSD/sssd/pull/266
Author: jhrozek
Title: #266: IPA: Fix the PAM error code that auth code expects to start migration
Action: opened
PR body:
"""
Resolves:
https://pagure.io/SSSD/sssd/issue/3394
To support PKINIT, we now return PAM_NO_MODULE_DATA when the krb5_child
process returns ERR_NO_AUTH_METHOD_AVAILABLE. Previously, we used to return
PAM_CRED_ERR which the IPA auth code expects in order to start password
migration.
This patch syncs the two again.
To reproduce, add an ipa user without password:
ipa user-add migration_user Then try to log in as that user:
ssh migration_user@myclient
The IPA auth code should be then executed.
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/266/head:pr266
git checkout pr266