diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2012-03-08 15:19:07 -0500 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2012-03-09 08:24:52 -0500 |
| commit | d10350e1854cd2156567f058f5a76041994e7f2b (patch) | |
| tree | 43a86b9d5c9401d467ff9b92acf92d4757a56f01 /src/providers/ipa/ipa_init.c | |
| parent | 8372129f446e1558f1923a112f328a266144c3ce (diff) | |
| download | sssd_unused-d10350e1854cd2156567f058f5a76041994e7f2b.tar.gz sssd_unused-d10350e1854cd2156567f058f5a76041994e7f2b.tar.xz sssd_unused-d10350e1854cd2156567f058f5a76041994e7f2b.zip | |
IPA: Check nsAccountLock during PAM_ACCT_MGMT
https://fedorahosted.org/sssd/ticket/1227
Diffstat (limited to 'src/providers/ipa/ipa_init.c')
| -rw-r--r-- | src/providers/ipa/ipa_init.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_init.c b/src/providers/ipa/ipa_init.c index bb85632d..fca23f34 100644 --- a/src/providers/ipa/ipa_init.c +++ b/src/providers/ipa/ipa_init.c @@ -36,6 +36,7 @@ #include "providers/ipa/ipa_hostid.h" #include "providers/ipa/ipa_dyndns.h" #include "providers/ipa/ipa_session.h" +#include "providers/ldap/sdap_access.h" struct ipa_options *ipa_options = NULL; @@ -398,6 +399,16 @@ int sssm_ipa_access_init(struct be_ctx *bectx, goto done; } + /* Set up an sdap_access_ctx for checking expired/locked + * accounts. + */ + ipa_access_ctx->sdap_access_ctx = + talloc_zero(ipa_access_ctx, struct sdap_access_ctx); + + ipa_access_ctx->sdap_access_ctx->id_ctx = ipa_access_ctx->sdap_ctx; + ipa_access_ctx->sdap_access_ctx->access_rule[0] = LDAP_ACCESS_EXPIRE; + ipa_access_ctx->sdap_access_ctx->access_rule[1] = LDAP_ACCESS_EMPTY; + *ops = &ipa_access_ops; *pvt_data = ipa_access_ctx; |