summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-08-25 15:22:36 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-08-26 11:49:17 +0200
commit59a95122d6bf4e271e79443cfc8caab5831c2ae3 (patch)
treeb101c12cc920d9f18ab9a6600a2b42f63c20337a
parent05cf2b70adde257df3657f449635c917b0e96a52 (diff)
downloadsssd-59a95122d6bf4e271e79443cfc8caab5831c2ae3.tar.gz
sssd-59a95122d6bf4e271e79443cfc8caab5831c2ae3.tar.xz
sssd-59a95122d6bf4e271e79443cfc8caab5831c2ae3.zip
PAC: Skip SIDs that cannot be resolved to domain
-rw-r--r--src/responder/pac/pacsrv_cmd.c6
1 files changed, 4 insertions, 2 deletions
diff --git a/src/responder/pac/pacsrv_cmd.c b/src/responder/pac/pacsrv_cmd.c
index 0d8125887..f6e8abaf5 100644
--- a/src/responder/pac/pacsrv_cmd.c
+++ b/src/responder/pac/pacsrv_cmd.c
@@ -796,8 +796,10 @@ static errno_t pac_save_memberships_next(struct tevent_req *req)
sid = pr_ctx->add_sids[state->sid_iter];
ret = responder_get_domain_by_id(pr_ctx->pac_ctx->rctx, sid, &grp_dom);
if (ret != EOK) {
- DEBUG(SSSDBG_OP_FAILURE, ("responder_get_domain_by_id failed.\n"));
- return ret;
+ DEBUG(SSSDBG_MINOR_FAILURE, ("responder_get_domain_by_id failed, " \
+ "will try next group\n"));
+ state->sid_iter++;
+ continue;
}
ret = pac_store_membership(state->pr_ctx, state->user_dn, sid, grp_dom);