[SSSD] [PATCH] handle ERR_ACCOUNT_EXPIRED properly
Stephen Gallagher
sgallagh at redhat.com
Mon Jun 17 12:05:09 UTC 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/17/2013 05:21 AM, Pavel Březina wrote:
>
Nack
You probably need to extend sdap_access_reply() in ldap_access.c.
Right now, it will call be_req_terminate() with DP_ERR_FATAL unless
the response type is PAM_SUCCESS or PAM_PERM_DENIED. This differs from
the behavior in the AD and IPA environments.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlG++3UACgkQeiVVYja6o6OnOgCgjHuCPDqAhIx1+PfA1LtinmsL
/McAoJEKchu1nbV98FzaJypp99hYToBp
=3Sdv
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list