diff options
author | Stephen Gallagher <sgallagh@redhat.com> | 2011-04-25 15:23:38 -0400 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-05-24 14:54:38 -0400 |
commit | 6a21eb70c4d2b5b64aa52af9e8690eb68ccbdd76 (patch) | |
tree | 12fe94ebaa09951081ceb406991bbd0460a06c66 /src | |
parent | 5d0bc38bd4777667a90f960bf5531e2866864f30 (diff) | |
download | sssd_unused-6a21eb70c4d2b5b64aa52af9e8690eb68ccbdd76.tar.gz sssd_unused-6a21eb70c4d2b5b64aa52af9e8690eb68ccbdd76.tar.xz sssd_unused-6a21eb70c4d2b5b64aa52af9e8690eb68ccbdd76.zip |
simple provider: Don't treat primary GID lookup failures as fatal
Diffstat (limited to 'src')
-rw-r--r-- | src/providers/simple/simple_access.c | 32 |
1 files changed, 19 insertions, 13 deletions
diff --git a/src/providers/simple/simple_access.c b/src/providers/simple/simple_access.c index a54bad00..e2fc0755 100644 --- a/src/providers/simple/simple_access.c +++ b/src/providers/simple/simple_access.c @@ -158,22 +158,28 @@ errno_t simple_access_check(struct simple_ctx *ctx, const char *username, if (ret != EOK) { DEBUG(1, ("Could not look up primary group [%lu]: [%d][%s]\n", gid, ret, strerror(ret))); - goto done; - } + /* We have to treat this as non-fatal, because the primary + * group may be local to the machine and not available in + * our ID provider. + */ + } else { + primary_group = ldb_msg_find_attr_as_string(msg, SYSDB_NAME, NULL); + if (!primary_group) { + ret = EINVAL; + goto done; + } - primary_group = ldb_msg_find_attr_as_string(msg, SYSDB_NAME, NULL); - if (!primary_group) { - ret = EINVAL; - goto done; - } + groups[j] = talloc_strdup(tmp_ctx, primary_group); + if (!groups[j]) { + ret = ENOMEM; + goto done; + } + j++; - groups[j] = talloc_strdup(tmp_ctx, primary_group); - if (!groups[j]) { - ret = ENOMEM; - goto done; + talloc_zfree(msg); } - groups[j+1] = NULL; - talloc_zfree(msg); + + groups[j] = NULL; /* Now process allow and deny group rules * If access was already granted above, we'll skip |