summaryrefslogtreecommitdiffstats
path: root/src/providers
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2012-11-07 18:28:29 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-11-15 18:24:23 +0100
commitfa0f0f255039d4f905d4c2b1e113347014c32eee (patch)
tree3aa70e83fdcafbc7cc12fdf88d4204a67128c6e5 /src/providers
parentdc5415738575072cf96e09bdcad6e5bf9f6bc197 (diff)
downloadsssd-fa0f0f255039d4f905d4c2b1e113347014c32eee.tar.gz
sssd-fa0f0f255039d4f905d4c2b1e113347014c32eee.tar.xz
sssd-fa0f0f255039d4f905d4c2b1e113347014c32eee.zip
Do not always return PAM_SYSTEM_ERR when offline krb5 authentication fails
Diffstat (limited to 'src/providers')
-rw-r--r--src/providers/krb5/krb5_auth.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
index f2e00fac1..a4bd631cb 100644
--- a/src/providers/krb5/krb5_auth.c
+++ b/src/providers/krb5/krb5_auth.c
@@ -34,6 +34,7 @@
#include "util/util.h"
#include "util/find_uid.h"
+#include "util/auth_utils.h"
#include "db/sysdb.h"
#include "util/child_common.h"
#include "providers/krb5/krb5_auth.h"
@@ -1127,7 +1128,7 @@ static void krb5_pam_handler_cache_auth_step(struct tevent_req *req)
NULL);
if (ret != EOK) {
DEBUG(1, ("Offline authentication failed\n"));
- state->pam_status = PAM_SYSTEM_ERR;
+ state->pam_status = cached_login_pam_status(ret);
state->dp_err = DP_ERR_OK;
} else {
ret = add_user_to_delayed_online_authentication(krb5_ctx, pd,