[SSSD] [PATCH] PAM: new option pam_trusted_users

Pavel Reichl preichl at redhat.com
Mon Sep 29 09:10:41 UTC 2014


Hello,

please see attached patch, which is amended Daniel Gollubs' patch from 
thread

[SSSD] [PATCH] PAM: Add domains= option to pam_sss (https://lists.fedorahosted.org/pipermail/sssd-devel/2014-July/020867.html).

I have just fixed nitpick found by Jakub and rebased it on top of previous patch in this thread.

and I also changed this:

Because I think dom->name would be uninitialized. However, I haven't 
tested this patch.

@@ -836,12 +867,22 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd)
              ret = ENOENT;
              goto done;
          }

         /* skip this domain if not requested */
-        if (!is_domain_requested(pd, dom->name)) {
+        if (!is_domain_requested(pd, pd->domain)) {
	    ret = ENOENT;
	    goto done;
	}


Thanks!


On 09/27/2014 12:39 PM, Pavel Reichl wrote:
> Attached patch now contains both options.
>
> Thanks.
>
>
> On 09/25/2014 03:57 PM, Pavel Reichl wrote:
>> Hello,
>>
>> please see attached patch which adds first of two options proposed in 
>> https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM
>>
>> Thanks!
>>
>>
>> _______________________________________________
>> sssd-devel mailing list
>> sssd-devel at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
>
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140929/4fc77712/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-PAM-Add-domains-option-to-pam_sss.patch
Type: text/x-patch
Size: 9090 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140929/4fc77712/attachment.bin>


More information about the sssd-devel mailing list