From 249a28dbf31e11794c7f35d709c5561c1555898d Mon Sep 17 00:00:00 2001
From: Simo Sorce <simo@redhat.com>
Date: Thu, 10 Jan 2013 16:36:22 -0500
Subject: Pass domain not be_req to access check functions

---
 src/providers/ad/ad_access.c | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

(limited to 'src/providers/ad/ad_access.c')

diff --git a/src/providers/ad/ad_access.c b/src/providers/ad/ad_access.c
index 16b2423fd..ec086d4ec 100644
--- a/src/providers/ad/ad_access.c
+++ b/src/providers/ad/ad_access.c
@@ -39,22 +39,25 @@ ad_access_handler(struct be_req *breq)
                             struct ad_access_ctx);
 
     struct pam_data *pd = talloc_get_type(breq->req_data, struct pam_data);
+    struct sss_domain_info *domain;
 
     /* Handle subdomains */
     if (strcasecmp(pd->domain, breq->be_ctx->domain->name) != 0) {
-        breq->domain = new_subdomain(breq, breq->be_ctx->domain, pd->domain,
-                                     NULL, NULL);
-        if (breq->domain == NULL) {
+        domain = new_subdomain(breq, breq->be_ctx->domain,
+                               pd->domain, NULL, NULL);
+        if (domain == NULL) {
             DEBUG(SSSDBG_OP_FAILURE, ("new_subdomain failed.\n"));
             breq->fn(breq, DP_ERR_FATAL, PAM_SYSTEM_ERR, NULL);
             return;
         }
+    } else {
+        domain = breq->be_ctx->domain;
     }
 
     /* Verify that the account is not locked */
     req = sdap_access_send(breq,
                            breq->be_ctx->ev,
-                           breq,
+                           breq->be_ctx, domain,
                            access_ctx->sdap_access_ctx,
                            pd);
     if (!req) {
-- 
cgit