summaryrefslogtreecommitdiffstats
path: root/src/providers
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2016-04-15 09:24:06 +0200
committerLukas Slebodnik <lslebodn@redhat.com>2016-04-19 11:49:17 +0200
commitc3d2f8cd25021a120161505914f8c2a0cdfa8d25 (patch)
treeddd6018eb2a0d75c0f7c6308ce00be1e10ddf405 /src/providers
parente547eb597ade731f49b679ce264bbfd907363ff8 (diff)
downloadsssd-c3d2f8cd25021a120161505914f8c2a0cdfa8d25.tar.gz
sssd-c3d2f8cd25021a120161505914f8c2a0cdfa8d25.tar.xz
sssd-c3d2f8cd25021a120161505914f8c2a0cdfa8d25.zip
krb5_auth_store_creds: silence spurious debug message
During a pre-authentication request there are always messages like: ... [krb5_auth_store_creds] (0x0010): unsupported PAM command [249]. ... [krb5_auth_store_creds] (0x0010): password not available, offline auth may not work. This patch removes them. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Diffstat (limited to 'src/providers')
-rw-r--r--src/providers/krb5/krb5_auth.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
index f69245efd..7ed7bd73d 100644
--- a/src/providers/krb5/krb5_auth.c
+++ b/src/providers/krb5/krb5_auth.c
@@ -339,6 +339,10 @@ static void krb5_auth_store_creds(struct sss_domain_info *domain,
* as the cached password.
*/
break;
+ case SSS_PAM_PREAUTH:
+ /* There are no credentials available during pre-authentication,
+ * nothing to do. */
+ break;
case SSS_PAM_AUTHENTICATE:
case SSS_PAM_CHAUTHTOK_PRELIM:
if (sss_authtok_get_type(pd->authtok) == SSS_AUTHTOK_TYPE_2FA) {
@@ -372,7 +376,7 @@ static void krb5_auth_store_creds(struct sss_domain_info *domain,
}
if (password == NULL) {
- if (pd->cmd != SSS_CMD_RENEW) {
+ if (pd->cmd != SSS_CMD_RENEW && pd->cmd != SSS_PAM_PREAUTH) {
DEBUG(SSSDBG_FATAL_FAILURE,
"password not available, offline auth may not work.\n");
/* password caching failures are not fatal errors */