summaryrefslogtreecommitdiffstats
path: root/src/providers/krb5/krb5_auth.c
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2012-11-07 18:28:29 +0100
committerJakub Hrozek <jhrozek@redhat.com>2013-01-29 11:29:37 +0100
commit4dd996dad753182ae62132fcfd2a8518e57836d4 (patch)
tree5d31e4ef699a818faff491be8937d57ce85f2c82 /src/providers/krb5/krb5_auth.c
parentdaaa64e0c84cda7e8d07891f231896ce48832946 (diff)
downloadsssd-4dd996dad753182ae62132fcfd2a8518e57836d4.tar.gz
sssd-4dd996dad753182ae62132fcfd2a8518e57836d4.tar.xz
sssd-4dd996dad753182ae62132fcfd2a8518e57836d4.zip
Do not always return PAM_SYSTEM_ERR when offline krb5 authentication fails
Diffstat (limited to 'src/providers/krb5/krb5_auth.c')
-rw-r--r--src/providers/krb5/krb5_auth.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
index 83dcfae82..82d8ecc2b 100644
--- a/src/providers/krb5/krb5_auth.c
+++ b/src/providers/krb5/krb5_auth.c
@@ -34,6 +34,7 @@
#include "util/util.h"
#include "util/find_uid.h"
+#include "util/auth_utils.h"
#include "db/sysdb.h"
#include "util/child_common.h"
#include "providers/krb5/krb5_auth.h"
@@ -1132,7 +1133,7 @@ static void krb5_pam_handler_cache_auth_step(struct tevent_req *req)
NULL);
if (ret != EOK) {
DEBUG(1, ("Offline authentication failed\n"));
- state->pam_status = PAM_SYSTEM_ERR;
+ state->pam_status = cached_login_pam_status(ret);
state->dp_err = DP_ERR_OK;
} else {
ret = add_user_to_delayed_online_authentication(krb5_ctx, pd,