diff options
| author | Petr Cech <pcech@redhat.com> | 2016-08-02 10:11:14 +0200 |
|---|---|---|
| committer | Lukas Slebodnik <lslebodn@redhat.com> | 2016-08-08 14:41:01 +0200 |
| commit | 565e6dc434eec865c73ad1d0b61f86f5538dff01 (patch) | |
| tree | e8fb8ce26f56563630d1c1ea669e82d7ac9bf3bd /src/providers/ldap | |
| parent | f9d363f9feb7d057d66ba98337e0f8a6fdbca5ab (diff) | |
| download | sssd-565e6dc434eec865c73ad1d0b61f86f5538dff01.tar.gz sssd-565e6dc434eec865c73ad1d0b61f86f5538dff01.tar.xz sssd-565e6dc434eec865c73ad1d0b61f86f5538dff01.zip | |
LDAP: Fixing wrong pam error code for passwd
This patch adds right pam error code for sssd offline state.
Resolves:
https://fedorahosted.org/sssd/ticket/3109
Diffstat (limited to 'src/providers/ldap')
| -rw-r--r-- | src/providers/ldap/ldap_auth.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/providers/ldap/ldap_auth.c b/src/providers/ldap/ldap_auth.c index 107f6ded1..35f16b0d4 100644 --- a/src/providers/ldap/ldap_auth.c +++ b/src/providers/ldap/ldap_auth.c @@ -1101,6 +1101,11 @@ sdap_pam_chpass_handler_send(TALLOC_CTX *mem_ctx, state->auth_ctx = auth_ctx; state->ev = params->ev; + if (be_is_offline(state->be_ctx)) { + pd->pam_status = PAM_AUTHINFO_UNAVAIL; + goto immediately; + } + if ((pd->priv == 1) && (pd->cmd == SSS_PAM_CHAUTHTOK_PRELIM) && (sss_authtok_get_type(pd->authtok) != SSS_AUTHTOK_TYPE_PASSWORD)) { DEBUG(SSSDBG_CONF_SETTINGS, |