[SSSD] [PATCH] handle ERR_ACCOUNT_EXPIRED properly

Jakub Hrozek jhrozek at redhat.com
Mon Jun 17 17:59:05 UTC 2013


On Mon, Jun 17, 2013 at 10:38:51AM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 06/17/2013 08:14 AM, Pavel Březina wrote:
> > On 06/17/2013 02:05 PM, Stephen Gallagher wrote:
> >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> >> 
> >> On 06/17/2013 05:21 AM, Pavel Březina wrote:
> >>> 
> >> 
> >> Nack
> >> 
> >> You probably need to extend sdap_access_reply() in
> >> ldap_access.c. Right now, it will call be_req_terminate() with
> >> DP_ERR_FATAL unless the response type is PAM_SUCCESS or
> >> PAM_PERM_DENIED. This differs from the behavior in the AD and IPA
> >> environments.
> > 
> > Nice catch. Thanks.
> > 
> > New patch is attached.
> > 
> 
> Ack

Thank you for the review, Stephen.

Pushed to master.



More information about the sssd-devel mailing list