From ee02e59e4d966f44c7a48ad04474156fc65d7006 Mon Sep 17 00:00:00 2001
From: Pavel Březina <pbrezina@redhat.com>
Date: Mon, 17 Jun 2013 10:31:02 +0200
Subject: handle ERR_ACCOUNT_EXPIRED properly

https://fedorahosted.org/sssd/ticket/1953
---
 src/providers/ad/ad_access.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'src/providers/ad/ad_access.c')

diff --git a/src/providers/ad/ad_access.c b/src/providers/ad/ad_access.c
index ef1775d7f..4e4dc8833 100644
--- a/src/providers/ad/ad_access.c
+++ b/src/providers/ad/ad_access.c
@@ -86,6 +86,10 @@ ad_access_done(struct tevent_req *req)
         pd->pam_status = PAM_PERM_DENIED;
         be_req_terminate(breq, DP_ERR_OK, PAM_PERM_DENIED, NULL);
         return;
+    case ERR_ACCOUNT_EXPIRED:
+        pd->pam_status = PAM_ACCT_EXPIRED;
+        be_req_terminate(breq, DP_ERR_OK, PAM_ACCT_EXPIRED, NULL);
+        return;
     default:
         /* Something went wrong */
         pd->pam_status = PAM_SYSTEM_ERR;
-- 
cgit