[SSSD] [PATCHES] Check nsAccountLock during IPA pam_acct_mgmt

Stephen Gallagher sgallagh at redhat.com
Fri Mar 9 13:28:48 UTC 2012


On Fri, 2012-03-09 at 13:18 +0100, Jan Zelený wrote:
> > Patch 0001: Make sdap_access_send() public so the IPA provider can
> > consume it.
> > 
> > Patch 0002: Check that the user is not disabled before performing the
> > HBAC check. I chose to do the nsAccountLock check first because it's a
> > very fast operation against the cache, so if it returns PAM_PERM_DENIED
> > we will skip the slower HBAC checks and jump straight to denial.
> 
> Ack to both.



Pushed to master and sssd-1-8.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120309/9866b326/attachment.sig>


More information about the sssd-devel mailing list