summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2012-02-10 19:11:33 +0100
committerStephen Gallagher <sgallagh@redhat.com>2012-02-10 13:33:20 -0500
commit5f0d58621ef1dbacabcdf7e79b404b69d014b47a (patch)
tree3ca70c537fd778f7918f6cf44cff208ce95abde8
parent7458877be9c8ba21a1c490e7693e8c949075e163 (diff)
downloadsssd_unused-5f0d58621ef1dbacabcdf7e79b404b69d014b47a.tar.gz
sssd_unused-5f0d58621ef1dbacabcdf7e79b404b69d014b47a.tar.xz
sssd_unused-5f0d58621ef1dbacabcdf7e79b404b69d014b47a.zip
Only fetch SELinux string if the user is found
-rw-r--r--src/responder/pam/pamsrv_cmd.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 13dd09a9..bf511487 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -734,7 +734,8 @@ static void pam_reply(struct pam_auth_req *preq)
return;
}
- if (pd->cmd == SSS_PAM_OPEN_SESSION) {
+ if (pd->cmd == SSS_PAM_OPEN_SESSION &&
+ pd->pam_status == PAM_SUCCESS) {
/* Try to fetch data from sysdb
* (auth already passed -> we should have them) */
ret = get_selinux_string(preq);