[SSSD] [PATCH] Don't report a fatal error for an HBAC denial
Stephen Gallagher
sgallagh at redhat.com
Sun May 16 19:20:16 UTC 2010
On 05/14/2010 06:21 AM, Sumit Bose wrote:
> On Thu, May 13, 2010 at 10:53:30AM -0400, Stephen Gallagher wrote:
>> I noticed a minor bug while working on the ldap_access_filter patch.
>> Currently, if the HBAC access provider returns ANYTHING but
>> PAM_SUCCESS, it reports it as a fatal error in the backend.
>>
>> However, we should also be handling PAM_PERM_DENIED as a successful
>> return. So this patch corrects that.
>>
>> Should apply cleanly to both master and sssd-1-2.
>
> ACK
>
Pushed to master and sssd-1-2
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
More information about the sssd-devel
mailing list