[SSSD] [PATCH] handle ERR_ACCOUNT_EXPIRED properly
Stephen Gallagher
sgallagh at redhat.com
Mon Jun 17 14:38:51 UTC 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/17/2013 08:14 AM, Pavel Březina wrote:
> On 06/17/2013 02:05 PM, Stephen Gallagher wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>>
>> On 06/17/2013 05:21 AM, Pavel Březina wrote:
>>>
>>
>> Nack
>>
>> You probably need to extend sdap_access_reply() in
>> ldap_access.c. Right now, it will call be_req_terminate() with
>> DP_ERR_FATAL unless the response type is PAM_SUCCESS or
>> PAM_PERM_DENIED. This differs from the behavior in the AD and IPA
>> environments.
>
> Nice catch. Thanks.
>
> New patch is attached.
>
Ack
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlG/H3sACgkQeiVVYja6o6MJqwCeL6TT67auddI9IBw8tBh4nOCF
K0YAn0WXAK7mvMxVDx25Y3M5r3hr8EB6
=x1uA
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list