diff options
| author | Sumit Bose <sbose@redhat.com> | 2016-07-04 15:52:00 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2016-07-06 19:12:04 +0200 |
| commit | 2ca45dfa0144fea08bd360dafded57bc90111e68 (patch) | |
| tree | 6756031cfef255a7dfd12ab5e8c1eadfd1a926e6 /src/python/pyhbac.c | |
| parent | 2658ad37cd04f211aa28b1d71acb27c4edfb03da (diff) | |
| download | sssd-2ca45dfa0144fea08bd360dafded57bc90111e68.tar.gz sssd-2ca45dfa0144fea08bd360dafded57bc90111e68.tar.xz sssd-2ca45dfa0144fea08bd360dafded57bc90111e68.zip | |
localauth: make plugin non-authoritative on failures
According to the documentation in localauth_plugin.h "aname will be
considered authorized if at least one module returns 0 and all other
modules return KRB5_PLUGIN_NO_HANDLE." So it is safe to always return
KRB5_PLUGIN_NO_HANDLE because a different plugin has to return 0 to
allow access to the given principal.
Resolves https://fedorahosted.org/sssd/ticket/2788
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/python/pyhbac.c')
0 files changed, 0 insertions, 0 deletions