diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2016-04-28 10:31:45 +0200 |
|---|---|---|
| committer | Lukas Slebodnik <lslebodn@redhat.com> | 2016-07-01 15:28:33 +0200 |
| commit | fcbcfa69f9291936f01f24b5fcb5a7672dca46f3 (patch) | |
| tree | a49ba2e0f768f17916bcf481afaafce21e059135 /src/util/util_errors.h | |
| parent | ab5c1f5d8c2855e56198676cef2b5fd418d96d42 (diff) | |
| download | sssd-fcbcfa69f9291936f01f24b5fcb5a7672dca46f3.tar.gz sssd-fcbcfa69f9291936f01f24b5fcb5a7672dca46f3.tar.xz sssd-fcbcfa69f9291936f01f24b5fcb5a7672dca46f3.zip | |
SSH: Do not print an error message if sss_ssh_authorizedkeys is asked for a local user
If an IPA client uses the SSH integration and a local user logs in with
SSH, the sss_ssh_authorizedkeys looks up their keys in the SSH
responder, which doesn't find the user and returns ENOENT. The
sss_ssh_authorizedkeys reports a failure on any error, including ENOENT
which produced a confusing error message in the logs.
This patch adds a new error code that handles users that are not found
by SSSD but exist on the system and also special cases root with the
same error code. Therefore, logging in as a local user no longer prints
an error message.
Resolves:
https://fedorahosted.org/sssd/ticket/3003
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src/util/util_errors.h')
| -rw-r--r-- | src/util/util_errors.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/util/util_errors.h b/src/util/util_errors.h index d234ed00f..15ec5974b 100644 --- a/src/util/util_errors.h +++ b/src/util/util_errors.h @@ -118,6 +118,7 @@ enum sssd_errors { ERR_NO_TS, ERR_TS_CACHE_MISS, ERR_DEREF_THRESHOLD, + ERR_NON_SSSD_USER, ERR_LAST /* ALWAYS LAST */ }; |