[SSSD] [PATCH] handle ERR_ACCOUNT_EXPIRED properly

Stephen Gallagher sgallagh at redhat.com
Mon Jun 17 14:38:51 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/17/2013 08:14 AM, Pavel Březina wrote:
> On 06/17/2013 02:05 PM, Stephen Gallagher wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>> 
>> On 06/17/2013 05:21 AM, Pavel Březina wrote:
>>> 
>> 
>> Nack
>> 
>> You probably need to extend sdap_access_reply() in
>> ldap_access.c. Right now, it will call be_req_terminate() with
>> DP_ERR_FATAL unless the response type is PAM_SUCCESS or
>> PAM_PERM_DENIED. This differs from the behavior in the AD and IPA
>> environments.
> 
> Nice catch. Thanks.
> 
> New patch is attached.
> 

Ack

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlG/H3sACgkQeiVVYja6o6MJqwCeL6TT67auddI9IBw8tBh4nOCF
K0YAn0WXAK7mvMxVDx25Y3M5r3hr8EB6
=x1uA
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list