diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2012-11-07 18:28:29 +0100 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-01-29 11:29:37 +0100 |
commit | 4dd996dad753182ae62132fcfd2a8518e57836d4 (patch) | |
tree | 5d31e4ef699a818faff491be8937d57ce85f2c82 /src/util/auth_utils.h | |
parent | daaa64e0c84cda7e8d07891f231896ce48832946 (diff) | |
download | sssd-4dd996dad753182ae62132fcfd2a8518e57836d4.tar.gz sssd-4dd996dad753182ae62132fcfd2a8518e57836d4.tar.xz sssd-4dd996dad753182ae62132fcfd2a8518e57836d4.zip |
Do not always return PAM_SYSTEM_ERR when offline krb5 authentication fails
Diffstat (limited to 'src/util/auth_utils.h')
-rw-r--r-- | src/util/auth_utils.h | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/src/util/auth_utils.h b/src/util/auth_utils.h new file mode 100644 index 000000000..e9e60a085 --- /dev/null +++ b/src/util/auth_utils.h @@ -0,0 +1,42 @@ +/* + SSSD + + Authentication utility functions + + Authors: + Jakub Hrozek <jhrozek@redhat.com> + + Copyright (C) 2012 Red Hat + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +#include <errno.h> +#include <security/pam_appl.h> + +static inline int cached_login_pam_status(int auth_res) +{ + switch (auth_res) { + case EOK: + return PAM_SUCCESS; + case ENOENT: + return PAM_AUTHINFO_UNAVAIL; + case EINVAL: + return PAM_AUTH_ERR; + case EACCES: + return PAM_PERM_DENIED; + } + + return PAM_SYSTEM_ERR; +} |