[SSSD] [PATCH] Don't report a fatal error for an HBAC denial

Stephen Gallagher sgallagh at redhat.com
Thu May 13 14:53:30 UTC 2010


I noticed a minor bug while working on the ldap_access_filter patch. 
Currently, if the HBAC access provider returns ANYTHING but PAM_SUCCESS, 
it reports it as a fatal error in the backend.

However, we should also be handling PAM_PERM_DENIED as a successful 
return. So this patch corrects that.

Should apply cleanly to both master and sssd-1-2.
-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Don-t-report-a-fatal-error-for-an-HBAC-denial.patch
Type: text/x-patch
Size: 1005 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100513/7d3f63ef/attachment.bin>


More information about the sssd-devel mailing list