summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-08-29 08:51:05 -0400
committerStephen Gallagher <sgallagh@redhat.com>2011-08-29 08:51:05 -0400
commit1997df3e5ef39ba81ac0f258d7f5ec94e9c0fee6 (patch)
tree7daef5390ea276a44c8e80f34df55eaf5da74780
parent5e9a8ba6a9e20f984722f6252575f08231f35701 (diff)
downloadsssd-1997df3e5ef39ba81ac0f258d7f5ec94e9c0fee6.tar.gz
sssd-1997df3e5ef39ba81ac0f258d7f5ec94e9c0fee6.tar.xz
sssd-1997df3e5ef39ba81ac0f258d7f5ec94e9c0fee6.zip
HBAC: Properly skip all non-group memberOf entries
-rw-r--r--src/providers/ipa/ipa_hbac_users.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_hbac_users.c b/src/providers/ipa/ipa_hbac_users.c
index 9b7cadb2e..56259da5a 100644
--- a/src/providers/ipa/ipa_hbac_users.c
+++ b/src/providers/ipa/ipa_hbac_users.c
@@ -73,7 +73,8 @@ get_ipa_groupname(TALLOC_CTX *mem_ctx,
if (ldb_dn_get_comp_num(dn) < 4) {
/* RDN, groups, accounts, and at least one DC= */
- ret = EINVAL;
+ /* If it's fewer, it's not a group DN */
+ ret = ENOENT;
goto done;
}