summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-01-19 15:42:03 -0500
committerStephen Gallagher <sgallagh@redhat.com>2011-01-21 09:24:56 -0500
commitaab009992cc8fbc66d5c07ff501b6788144afe61 (patch)
tree1c6c05249b561202b59fb4a3acc0c29e1b2f72c0
parent3ad662a4d26c0d6ee4e382758ca7b3f0c2880d20 (diff)
downloadsssd-aab009992cc8fbc66d5c07ff501b6788144afe61.tar.gz
sssd-aab009992cc8fbc66d5c07ff501b6788144afe61.tar.xz
sssd-aab009992cc8fbc66d5c07ff501b6788144afe61.zip
Perform initgroups lookup for PAM
Previously we were only looking up the user, but we need to make sure that all groups are available for use by access providers.
-rw-r--r--src/responder/pam/pamsrv_cmd.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 830fdc43c..79993d336 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -897,7 +897,9 @@ static int pam_check_user_search(struct pam_auth_req *preq)
ret = sss_dp_send_acct_req(preq->cctx->rctx, preq,
pam_check_user_dp_callback, preq,
SSS_CLI_SOCKET_TIMEOUT/2,
- dom->name, false, SSS_DP_USER, name, 0);
+ dom->name, false,
+ SSS_DP_INITGROUPS,
+ name, 0);
if (ret != EOK) {
DEBUG(3, ("Failed to dispatch request: %d(%s)\n",
ret, strerror(ret)));