diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-07-25 17:55:33 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-07-29 14:03:21 +0200 |
| commit | 210bc14aac190bbb043272821aeb3342c995a4f6 (patch) | |
| tree | 33d4e6f5a1429a5a4b658c0c8597ded71f81c0c9 /src/providers/ad | |
| parent | 21bc143c2855638242e9dfe01ea66198b5883b8a (diff) | |
| download | sssd-210bc14aac190bbb043272821aeb3342c995a4f6.tar.gz sssd-210bc14aac190bbb043272821aeb3342c995a4f6.tar.xz sssd-210bc14aac190bbb043272821aeb3342c995a4f6.zip | |
AD: Check return value of ad_gpo_evaluate_dacl
Reviewed-by: Pavel Reichl <preichl@redhat.com>
Diffstat (limited to 'src/providers/ad')
| -rw-r--r-- | src/providers/ad/ad_gpo.c | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/src/providers/ad/ad_gpo.c b/src/providers/ad/ad_gpo.c index e33ea72e9..7c05afa39 100644 --- a/src/providers/ad/ad_gpo.c +++ b/src/providers/ad/ad_gpo.c @@ -559,8 +559,13 @@ ad_gpo_filter_gpos_by_dacl(TALLOC_CTX *mem_ctx, break; } - ad_gpo_evaluate_dacl(dacl, idmap_ctx, user_sid, group_sids, - group_size, &access_allowed); + ret = ad_gpo_evaluate_dacl(dacl, idmap_ctx, user_sid, group_sids, + group_size, &access_allowed); + if (ret != EOK) { + DEBUG(SSSDBG_MINOR_FAILURE, "Could not determine if GPO is applicable\n"); + continue; + } + if (access_allowed) { DEBUG(SSSDBG_TRACE_ALL, "GPO applicable to target per security filtering\n"); |