diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-10-06 20:23:07 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-10-25 22:04:11 +0200 |
| commit | 0b23970978de5c1088a5dbdd6012800b4db94572 (patch) | |
| tree | cd8b9ba6865318f825d3a9246773d713545ab016 /src/providers/ad/ad_access.c | |
| parent | d32961c07381a5518a15e8e83d3475445d871410 (diff) | |
| download | sssd-0b23970978de5c1088a5dbdd6012800b4db94572.tar.gz sssd-0b23970978de5c1088a5dbdd6012800b4db94572.tar.xz sssd-0b23970978de5c1088a5dbdd6012800b4db94572.zip | |
LDAP: Amend sdap_access_check to allow any connection
Related:
https://fedorahosted.org/sssd/ticket/2082
Also move the check for subdomain to the handler. I think it is the job
of the handler to decide which domain the request belongs to, not the
request itself.
Diffstat (limited to 'src/providers/ad/ad_access.c')
| -rw-r--r-- | src/providers/ad/ad_access.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ad/ad_access.c b/src/providers/ad/ad_access.c index 746017dc5..cf6412f22 100644 --- a/src/providers/ad/ad_access.c +++ b/src/providers/ad/ad_access.c @@ -56,7 +56,9 @@ ad_access_handler(struct be_req *breq) /* Verify that the account is not locked */ req = sdap_access_send(breq, be_ctx->ev, be_ctx, domain, - access_ctx->sdap_access_ctx, pd); + access_ctx->sdap_access_ctx, + access_ctx->sdap_access_ctx->id_ctx->conn, + pd); if (!req) { be_req_terminate(breq, DP_ERR_FATAL, PAM_SYSTEM_ERR, NULL); return; |