From 79ee5fbacd6ee4153fa59edf5b1ae55b4f020211 Mon Sep 17 00:00:00 2001
From: Pavel Reichl <preichl@redhat.com>
Date: Fri, 6 Mar 2015 04:38:05 -0500
Subject: SDAP: fix minor neglect in is_account_locked()

It would be better to return explicit error code, although access is
still denied and error message printed.

Relates:
https://fedorahosted.org/sssd/ticket/2534

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
---
 src/providers/ldap/sdap_access.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/providers/ldap/sdap_access.c b/src/providers/ldap/sdap_access.c
index f5feece5..be2dacf5 100644
--- a/src/providers/ldap/sdap_access.c
+++ b/src/providers/ldap/sdap_access.c
@@ -1779,6 +1779,8 @@ is_account_locked(const char *pwdAccountLockedTime,
     default:
         DEBUG(SSSDBG_MINOR_FAILURE,
               "Unexpected value of password policy mode: %d.\n", pwpol_mode);
+        ret = EINVAL;
+        goto done;
     }
 
     ret = EOK;
-- 
cgit