From aab009992cc8fbc66d5c07ff501b6788144afe61 Mon Sep 17 00:00:00 2001 From: Stephen Gallagher Date: Wed, 19 Jan 2011 15:42:03 -0500 Subject: Perform initgroups lookup for PAM Previously we were only looking up the user, but we need to make sure that all groups are available for use by access providers. --- src/responder/pam/pamsrv_cmd.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c index 830fdc43c..79993d336 100644 --- a/src/responder/pam/pamsrv_cmd.c +++ b/src/responder/pam/pamsrv_cmd.c @@ -897,7 +897,9 @@ static int pam_check_user_search(struct pam_auth_req *preq) ret = sss_dp_send_acct_req(preq->cctx->rctx, preq, pam_check_user_dp_callback, preq, SSS_CLI_SOCKET_TIMEOUT/2, - dom->name, false, SSS_DP_USER, name, 0); + dom->name, false, + SSS_DP_INITGROUPS, + name, 0); if (ret != EOK) { DEBUG(3, ("Failed to dispatch request: %d(%s)\n", ret, strerror(ret))); -- cgit