[SSSD] [PATCH] PAM: Add pam environment variable AUTH_DOMAIN to pam reply

Jan Pazdziora jpazdziora at redhat.com
Tue Jun 30 11:47:01 UTC 2015


On Wed, Jun 10, 2015 at 03:36:04PM +0200, Michal Židek wrote:
> 
> See the attached patch that adds the AUTH_DOMAIN variable
> to pam reply.
> 
> Ticket:
> https://fedorahosted.org/sssd/ticket/2476
> 
> Thanks,
> Michal
>
> URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150610/c84359a5/attachment.bin>

It does the right thing and I'm able to get the value back via
pam_getenv(pamh, PAM_ENV_AUTH_DOMAIN) in my Apache module.

My only concern is that the domain name as returned by sssd is
lowercase which does not really match the realm as seen by say
mod_auth_kerb or mod_auth_gssapi. But I guess uppercasing the string
is up to consumer of that value.

-- 
Jan Pazdziora | adelton at #ipa*, #brno
Senior Principal Software Engineer, Identity Management Engineering, Red Hat



More information about the sssd-devel mailing list