summaryrefslogtreecommitdiff
path: root/src/responder/pam
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-01-19 15:42:03 -0500
committerStephen Gallagher <sgallagh@redhat.com>2011-01-21 09:24:56 -0500
commitaab009992cc8fbc66d5c07ff501b6788144afe61 (patch)
tree1c6c05249b561202b59fb4a3acc0c29e1b2f72c0 /src/responder/pam
parent3ad662a4d26c0d6ee4e382758ca7b3f0c2880d20 (diff)
downloadsssd-aab009992cc8fbc66d5c07ff501b6788144afe61.tar.gz
sssd-aab009992cc8fbc66d5c07ff501b6788144afe61.tar.bz2
sssd-aab009992cc8fbc66d5c07ff501b6788144afe61.zip
Perform initgroups lookup for PAM
Previously we were only looking up the user, but we need to make sure that all groups are available for use by access providers.
Diffstat (limited to 'src/responder/pam')
-rw-r--r--src/responder/pam/pamsrv_cmd.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 830fdc43..79993d33 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -897,7 +897,9 @@ static int pam_check_user_search(struct pam_auth_req *preq)
ret = sss_dp_send_acct_req(preq->cctx->rctx, preq,
pam_check_user_dp_callback, preq,
SSS_CLI_SOCKET_TIMEOUT/2,
- dom->name, false, SSS_DP_USER, name, 0);
+ dom->name, false,
+ SSS_DP_INITGROUPS,
+ name, 0);
if (ret != EOK) {
DEBUG(3, ("Failed to dispatch request: %d(%s)\n",
ret, strerror(ret)));