summaryrefslogtreecommitdiff
path: root/src/providers/krb5
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2012-11-07 18:28:29 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-11-12 11:09:26 +0100
commit6c7584a32899bf573f62cf8c3fb37410a8ec05bb (patch)
tree04a08d87f1113a292a326fc3a4ce73929c4bc609 /src/providers/krb5
parent891370856f6c797f959dab06b194e34102185d53 (diff)
downloadsssd-6c7584a32899bf573f62cf8c3fb37410a8ec05bb.tar.gz
sssd-6c7584a32899bf573f62cf8c3fb37410a8ec05bb.tar.bz2
sssd-6c7584a32899bf573f62cf8c3fb37410a8ec05bb.zip
Do not always return PAM_SYSTEM_ERR when offline krb5 authentication fails
Diffstat (limited to 'src/providers/krb5')
-rw-r--r--src/providers/krb5/krb5_auth.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
index f2e00fac..a4bd631c 100644
--- a/src/providers/krb5/krb5_auth.c
+++ b/src/providers/krb5/krb5_auth.c
@@ -34,6 +34,7 @@
#include "util/util.h"
#include "util/find_uid.h"
+#include "util/auth_utils.h"
#include "db/sysdb.h"
#include "util/child_common.h"
#include "providers/krb5/krb5_auth.h"
@@ -1127,7 +1128,7 @@ static void krb5_pam_handler_cache_auth_step(struct tevent_req *req)
NULL);
if (ret != EOK) {
DEBUG(1, ("Offline authentication failed\n"));
- state->pam_status = PAM_SYSTEM_ERR;
+ state->pam_status = cached_login_pam_status(ret);
state->dp_err = DP_ERR_OK;
} else {
ret = add_user_to_delayed_online_authentication(krb5_ctx, pd,