diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-11-23 19:43:04 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-11-25 18:48:11 +0100 |
| commit | fb106682e0277955e203ad074a368ddeb121fed3 (patch) | |
| tree | b3a42305d4c5c9dac8a443358e83bf4eca769c72 /src/db/sysdb_views.c | |
| parent | 6c4b1250ece32296ccdc15eccf2a0f740b3768b0 (diff) | |
| download | sssd-fb106682e0277955e203ad074a368ddeb121fed3.tar.gz sssd-fb106682e0277955e203ad074a368ddeb121fed3.tar.xz sssd-fb106682e0277955e203ad074a368ddeb121fed3.zip | |
PAM: Check for trusted domain before sending the request to BE
https://fedorahosted.org/sssd/ticket/2501
Moving the checks to one place has the advantage of not duplicating
security decisions. Previously, the checks were scattered all over the
responder code, making testing hard.
The disadvantage is that we actually check for the presence of the user,
which might trigger some back end lookups. But I think the benefits
overweight the disadvantage.
Also only check the requested domains from a trusted client. An untrusted
client should simply have no say in what domains he wants to talk to, it
should ignore the 'domains' option.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Diffstat (limited to 'src/db/sysdb_views.c')
0 files changed, 0 insertions, 0 deletions