[SSSD] KRB5 child: Don't return System Error on empty password
Jakub Hrozek
jhrozek at redhat.com
Wed Sep 19 08:35:08 UTC 2012
https://fedorahosted.org/sssd/ticket/1310
-------------- next part --------------
>From 89baa40069804e051c07c09c57c75899bcb8a087 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed, 19 Sep 2012 10:27:58 +0200
Subject: [PATCH] KRB5 child: Don't return System Error on empty password
https://fedorahosted.org/sssd/ticket/1310
---
src/providers/krb5/krb5_child.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c
index dc2e3117db0508df8a667dd9a3ab3323856d1b5c..9665f45ba2cdca9a8a19e7da24354e624ae33f7e 100644
--- a/src/providers/krb5/krb5_child.c
+++ b/src/providers/krb5/krb5_child.c
@@ -933,6 +933,9 @@ static int kerr_to_status(krb5_error_code kerr)
KRB5_CHILD_DEBUG(SSSDBG_CRIT_FAILURE, kerr);
switch (kerr) {
+ case KRB5_LIBOS_CANTREADPWD:
+ pam_status = PAM_CRED_UNAVAIL;
+ break;
case KRB5_KDC_UNREACH:
pam_status = PAM_AUTHINFO_UNAVAIL;
break;
@@ -942,6 +945,7 @@ static int kerr_to_status(krb5_error_code kerr)
case KRB5KRB_AP_ERR_BAD_INTEGRITY:
pam_status = PAM_AUTH_ERR;
break;
+ case KRB5_PREAUTH_FAILED:
case KRB5KDC_ERR_PREAUTH_FAILED:
pam_status = PAM_CRED_ERR;
break;
--
1.7.11.4
More information about the sssd-devel
mailing list