diff options
author | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-13 10:40:52 -0400 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-05-16 13:28:14 -0400 |
commit | 227dcb12f8cb8bc5f6968bc87d44e1a0bdb08c69 (patch) | |
tree | b5816d71ccc7565f5cdcf544d8468d9b69bdd752 /src/providers/ipa | |
parent | 48a038d077ed2de18a5211e010c18ab680107293 (diff) | |
download | sssd-227dcb12f8cb8bc5f6968bc87d44e1a0bdb08c69.tar.gz sssd-227dcb12f8cb8bc5f6968bc87d44e1a0bdb08c69.tar.bz2 sssd-227dcb12f8cb8bc5f6968bc87d44e1a0bdb08c69.zip |
Don't report a fatal error for an HBAC denial
Diffstat (limited to 'src/providers/ipa')
-rw-r--r-- | src/providers/ipa/ipa_access.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_access.c b/src/providers/ipa/ipa_access.c index af761fa0..58f937b8 100644 --- a/src/providers/ipa/ipa_access.c +++ b/src/providers/ipa/ipa_access.c @@ -91,7 +91,7 @@ static void ipa_access_reply(struct be_req *be_req, int pam_status) pd = talloc_get_type(be_req->req_data, struct pam_data); pd->pam_status = pam_status; - if (pam_status == PAM_SUCCESS) { + if (pam_status == PAM_SUCCESS || pam_status == PAM_PERM_DENIED) { be_req->fn(be_req, DP_ERR_OK, pam_status, NULL); } else { be_req->fn(be_req, DP_ERR_FATAL, pam_status, NULL); |