summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/sdap_async.c
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2014-01-08 17:12:17 +0100
committerJakub Hrozek <jhrozek@redhat.com>2014-01-09 12:08:57 +0100
commit2a96981a0ac781d01e5bba473409ed2bdf4cd4e0 (patch)
tree47422c8826c617c00b22f76b3347726ae48c031a /src/providers/ldap/sdap_async.c
parent461da2984c747708e8badd27fa55ef879f40e712 (diff)
downloadsssd-2a96981a0ac781d01e5bba473409ed2bdf4cd4e0.tar.gz
sssd-2a96981a0ac781d01e5bba473409ed2bdf4cd4e0.tar.xz
sssd-2a96981a0ac781d01e5bba473409ed2bdf4cd4e0.zip
LDAP: Add a new error code for malformed access control filter
https://fedorahosted.org/sssd/ticket/2164 The patch adds a new error code and special cases the new code so that access is denied and a nicer log message is shown.
Diffstat (limited to 'src/providers/ldap/sdap_async.c')
-rw-r--r--src/providers/ldap/sdap_async.c12
1 files changed, 6 insertions, 6 deletions
diff --git a/src/providers/ldap/sdap_async.c b/src/providers/ldap/sdap_async.c
index e905d2dd6..367007bde 100644
--- a/src/providers/ldap/sdap_async.c
+++ b/src/providers/ldap/sdap_async.c
@@ -1306,9 +1306,9 @@ static errno_t sdap_get_generic_ext_step(struct tevent_req *req)
sss_log(SSS_LOG_ERR, "LDAP connection error, %s",
sss_ldap_err2string(lret));
}
- }
-
- else {
+ } else if (lret == LDAP_FILTER_ERROR) {
+ ret = ERR_INVALID_FILTER;
+ } else {
ret = EIO;
}
goto done;
@@ -1570,7 +1570,7 @@ static void sdap_get_generic_done(struct tevent_req *subreq)
talloc_zfree(subreq);
if (ret) {
DEBUG(4, ("sdap_get_generic_ext_recv failed [%d]: %s\n",
- ret, strerror(ret)));
+ ret, sss_strerror(ret)));
tevent_req_error(req, ret);
return;
}
@@ -1790,7 +1790,7 @@ static void sdap_x_deref_search_done(struct tevent_req *subreq)
talloc_zfree(subreq);
if (ret) {
DEBUG(4, ("sdap_get_generic_ext_recv failed [%d]: %s\n",
- ret, strerror(ret)));
+ ret, sss_strerror(ret)));
tevent_req_error(req, ret);
return;
}
@@ -2049,7 +2049,7 @@ static void sdap_asq_search_done(struct tevent_req *subreq)
talloc_zfree(subreq);
if (ret) {
DEBUG(4, ("sdap_get_generic_ext_recv failed [%d]: %s\n",
- ret, strerror(ret)));
+ ret, sss_strerror(ret)));
tevent_req_error(req, ret);
return;
}