From fcbcfa69f9291936f01f24b5fcb5a7672dca46f3 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Thu, 28 Apr 2016 10:31:45 +0200 Subject: SSH: Do not print an error message if sss_ssh_authorizedkeys is asked for a local user MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit If an IPA client uses the SSH integration and a local user logs in with SSH, the sss_ssh_authorizedkeys looks up their keys in the SSH responder, which doesn't find the user and returns ENOENT. The sss_ssh_authorizedkeys reports a failure on any error, including ENOENT which produced a confusing error message in the logs. This patch adds a new error code that handles users that are not found by SSSD but exist on the system and also special cases root with the same error code. Therefore, logging in as a local user no longer prints an error message. Resolves: https://fedorahosted.org/sssd/ticket/3003 Reviewed-by: Pavel Březina --- src/util/util_errors.h | 1 + 1 file changed, 1 insertion(+) (limited to 'src/util/util_errors.h') diff --git a/src/util/util_errors.h b/src/util/util_errors.h index d234ed00f..15ec5974b 100644 --- a/src/util/util_errors.h +++ b/src/util/util_errors.h @@ -118,6 +118,7 @@ enum sssd_errors { ERR_NO_TS, ERR_TS_CACHE_MISS, ERR_DEREF_THRESHOLD, + ERR_NON_SSSD_USER, ERR_LAST /* ALWAYS LAST */ }; -- cgit