summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2010-11-09 12:53:04 +0100
committerStephen Gallagher <sgallagh@redhat.com>2010-12-03 10:41:28 -0500
commitd2d23847f879712d6e191134018a8bff70a5e2ab (patch)
tree7b572c683768fb04755de3ee02988ede05995a14
parentc7d73cf51642c7f89c1f21e54b8ce1b262bef899 (diff)
downloadsssd-d2d23847f879712d6e191134018a8bff70a5e2ab.tar.gz
sssd-d2d23847f879712d6e191134018a8bff70a5e2ab.tar.xz
sssd-d2d23847f879712d6e191134018a8bff70a5e2ab.zip
Add support for server-side pam response messages
-rw-r--r--src/providers/data_provider.h8
-rw-r--r--src/responder/pam/pamsrv_cmd.c2
2 files changed, 10 insertions, 0 deletions
diff --git a/src/providers/data_provider.h b/src/providers/data_provider.h
index 6fe3b3b22..e55b4ab7b 100644
--- a/src/providers/data_provider.h
+++ b/src/providers/data_provider.h
@@ -193,6 +193,14 @@ struct pam_data {
};
/* from dp_auth_util.c */
+#define SSS_SERVER_INFO 0x80000000
+
+#define SSS_KRB5_INFO 0x40000000
+#define SSS_LDAP_INFO 0x20000000
+#define SSS_PROXY_INFO 0x10000000
+
+#define SSS_KRB5_INFO_TGT_LIFETIME (SSS_SERVER_INFO|SSS_KRB5_INFO|0x01)
+
errno_t copy_pam_data(TALLOC_CTX *mem_ctx, struct pam_data *old_pd,
struct pam_data **new_pd);
void pam_print_data(int l, struct pam_data *pd);
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 25031e198..27a6195d6 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -373,6 +373,8 @@ static errno_t filter_responses(struct response_data *resp_list,
default:
DEBUG(7, ("User info type [%d] not filtered.\n"));
}
+ } else if (resp->type & SSS_SERVER_INFO) {
+ resp->do_not_send_to_client = true;
}
resp = resp->next;