[SSSD] KRB5 child: Don't return System Error on empty password

Jakub Hrozek jhrozek at redhat.com
Wed Sep 19 08:35:08 UTC 2012


https://fedorahosted.org/sssd/ticket/1310
-------------- next part --------------
>From 89baa40069804e051c07c09c57c75899bcb8a087 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed, 19 Sep 2012 10:27:58 +0200
Subject: [PATCH] KRB5 child: Don't return System Error on empty password

https://fedorahosted.org/sssd/ticket/1310
---
 src/providers/krb5/krb5_child.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c
index dc2e3117db0508df8a667dd9a3ab3323856d1b5c..9665f45ba2cdca9a8a19e7da24354e624ae33f7e 100644
--- a/src/providers/krb5/krb5_child.c
+++ b/src/providers/krb5/krb5_child.c
@@ -933,6 +933,9 @@ static int kerr_to_status(krb5_error_code kerr)
 
     KRB5_CHILD_DEBUG(SSSDBG_CRIT_FAILURE, kerr);
     switch (kerr) {
+        case KRB5_LIBOS_CANTREADPWD:
+                pam_status = PAM_CRED_UNAVAIL;
+                break;
         case KRB5_KDC_UNREACH:
                 pam_status = PAM_AUTHINFO_UNAVAIL;
                 break;
@@ -942,6 +945,7 @@ static int kerr_to_status(krb5_error_code kerr)
         case KRB5KRB_AP_ERR_BAD_INTEGRITY:
                 pam_status = PAM_AUTH_ERR;
                 break;
+        case KRB5_PREAUTH_FAILED:
         case KRB5KDC_ERR_PREAUTH_FAILED:
                 pam_status = PAM_CRED_ERR;
                 break;
-- 
1.7.11.4



More information about the sssd-devel mailing list