[SSSD] [PATCH] handle ERR_ACCOUNT_EXPIRED properly

Stephen Gallagher sgallagh at redhat.com
Mon Jun 17 12:05:09 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/17/2013 05:21 AM, Pavel Březina wrote:
> 

Nack

You probably need to extend sdap_access_reply() in ldap_access.c.
Right now, it will call be_req_terminate() with DP_ERR_FATAL unless
the response type is PAM_SUCCESS or PAM_PERM_DENIED. This differs from
the behavior in the AD and IPA environments.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlG++3UACgkQeiVVYja6o6OnOgCgjHuCPDqAhIx1+PfA1LtinmsL
/McAoJEKchu1nbV98FzaJypp99hYToBp
=3Sdv
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list