summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2010-05-13 10:40:52 -0400
committerStephen Gallagher <sgallagh@redhat.com>2010-05-16 13:28:43 -0400
commitd2832558f9959387d50b73616260ef2d21c8902f (patch)
tree8e563bfd83781692447efedc16aea56c3019bac1
parentfa26de3b1a8993a1c5a4b071851e5e5ff7ec2ce6 (diff)
downloadsssd-d2832558f9959387d50b73616260ef2d21c8902f.tar.gz
sssd-d2832558f9959387d50b73616260ef2d21c8902f.tar.xz
sssd-d2832558f9959387d50b73616260ef2d21c8902f.zip
Don't report a fatal error for an HBAC denial
-rw-r--r--src/providers/ipa/ipa_access.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_access.c b/src/providers/ipa/ipa_access.c
index 962ea51a7..2a498b1ee 100644
--- a/src/providers/ipa/ipa_access.c
+++ b/src/providers/ipa/ipa_access.c
@@ -91,7 +91,7 @@ static void ipa_access_reply(struct be_req *be_req, int pam_status)
pd = talloc_get_type(be_req->req_data, struct pam_data);
pd->pam_status = pam_status;
- if (pam_status == PAM_SUCCESS) {
+ if (pam_status == PAM_SUCCESS || pam_status == PAM_PERM_DENIED) {
be_req->fn(be_req, DP_ERR_OK, pam_status, NULL);
} else {
be_req->fn(be_req, DP_ERR_FATAL, pam_status, NULL);