diff options
| author | Sumit Bose <sbose@redhat.com> | 2010-01-07 10:26:02 +0100 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-01-11 08:22:08 -0500 |
| commit | 51d2fc166133763faafdb11cf3cd66b6fc4b7473 (patch) | |
| tree | 3b0b91be97aabf583145c3397a776cfb601f5360 | |
| parent | 3356eda61ac43c72a6bbb35c5a77eeccda2637d0 (diff) | |
| download | sssd-51d2fc166133763faafdb11cf3cd66b6fc4b7473.tar.gz sssd-51d2fc166133763faafdb11cf3cd66b6fc4b7473.tar.bz2 sssd-51d2fc166133763faafdb11cf3cd66b6fc4b7473.zip | |
Fix return value when offline and TGT is valid
Fixes CVE-2010-0014
| -rw-r--r-- | server/providers/krb5/krb5_auth.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/server/providers/krb5/krb5_auth.c b/server/providers/krb5/krb5_auth.c index a9f577d7..1ac8c4c5 100644 --- a/server/providers/krb5/krb5_auth.c +++ b/server/providers/krb5/krb5_auth.c @@ -951,7 +951,7 @@ static void krb5_resolve_done(struct tevent_req *req) DEBUG(1, ("pam_add_response failed.\n")); } - pam_status = PAM_SUCCESS; + pam_status = PAM_AUTHINFO_UNAVAIL; dp_err = DP_ERR_OFFLINE; goto done; } |