diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2012-10-23 15:12:45 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-11-05 00:14:04 +0100 |
| commit | 164770b821fe999ee498ec298560d81bd52f2173 (patch) | |
| tree | 6fbcd21c3c4565298b0b6b9dffb698f6adbac55e /src/providers/ldap | |
| parent | fb21b266f4ebd2c26d5622acd37dc9a0816ecc8c (diff) | |
| download | sssd-164770b821fe999ee498ec298560d81bd52f2173.tar.gz sssd-164770b821fe999ee498ec298560d81bd52f2173.tar.xz sssd-164770b821fe999ee498ec298560d81bd52f2173.zip | |
KRB5: Return error when principal selection fails
The ldap_child would return a NULL ccache but the error code would still
indicate success.
https://fedorahosted.org/sssd/ticket/1594
Diffstat (limited to 'src/providers/ldap')
| -rw-r--r-- | src/providers/ldap/ldap_child.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/providers/ldap/ldap_child.c b/src/providers/ldap/ldap_child.c index e0529dbc4..f35d94672 100644 --- a/src/providers/ldap/ldap_child.c +++ b/src/providers/ldap/ldap_child.c @@ -242,7 +242,10 @@ static krb5_error_code ldap_child_get_tgt_sync(TALLOC_CTX *memctx, ret = select_principal_from_keytab(memctx, hostname, realm_name, keytab_name, &full_princ, NULL, NULL); - if (ret) goto done; + if (ret) { + krberr = KRB5_KT_IOERR; + goto done; + } } if (!full_princ) { krberr = KRB5KRB_ERR_GENERIC; |