diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2011-08-29 08:51:05 -0400 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-10-26 10:29:39 -0400 |
| commit | 4396b4446acee09f5957ff63c4a86fdf854536df (patch) | |
| tree | 95f3508d4a9f639b023cdc621510d4431b2c4311 | |
| parent | 2a5a1a0a7919fb33b71583fbe85bad8cc96e318c (diff) | |
| download | sssd-4396b4446acee09f5957ff63c4a86fdf854536df.tar.gz sssd-4396b4446acee09f5957ff63c4a86fdf854536df.tar.xz sssd-4396b4446acee09f5957ff63c4a86fdf854536df.zip | |
HBAC: Properly skip all non-group memberOf entries
| -rw-r--r-- | src/providers/ipa/ipa_hbac_users.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_hbac_users.c b/src/providers/ipa/ipa_hbac_users.c index 9b7cadb2e..56259da5a 100644 --- a/src/providers/ipa/ipa_hbac_users.c +++ b/src/providers/ipa/ipa_hbac_users.c @@ -73,7 +73,8 @@ get_ipa_groupname(TALLOC_CTX *mem_ctx, if (ldb_dn_get_comp_num(dn) < 4) { /* RDN, groups, accounts, and at least one DC= */ - ret = EINVAL; + /* If it's fewer, it's not a group DN */ + ret = ENOENT; goto done; } |