[SSSD] [PATCHES] Check nsAccountLock during IPA pam_acct_mgmt

Jan Zelený jzeleny at redhat.com
Fri Mar 9 12:18:58 UTC 2012


> Patch 0001: Make sdap_access_send() public so the IPA provider can
> consume it.
> 
> Patch 0002: Check that the user is not disabled before performing the
> HBAC check. I chose to do the nsAccountLock check first because it's a
> very fast operation against the cache, so if it returns PAM_PERM_DENIED
> we will skip the slower HBAC checks and jump straight to denial.

Ack to both.

Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120309/80164d9a/attachment.sig>


More information about the sssd-devel mailing list