summaryrefslogtreecommitdiff
path: root/src/responder/pam
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2012-02-10 19:11:33 +0100
committerStephen Gallagher <sgallagh@redhat.com>2012-02-10 13:33:15 -0500
commit2a283b7f55508f05e58e61490208b8464731dc40 (patch)
tree36de763c7482fc8adbd0f9306a393cdbd38f8203 /src/responder/pam
parent3e1c814a7ca3a0e4086e0822d6b4df23b8465bc8 (diff)
downloadsssd-2a283b7f55508f05e58e61490208b8464731dc40.tar.gz
sssd-2a283b7f55508f05e58e61490208b8464731dc40.tar.bz2
sssd-2a283b7f55508f05e58e61490208b8464731dc40.zip
Only fetch SELinux string if the user is found
Diffstat (limited to 'src/responder/pam')
-rw-r--r--src/responder/pam/pamsrv_cmd.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 13dd09a9..bf511487 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -734,7 +734,8 @@ static void pam_reply(struct pam_auth_req *preq)
return;
}
- if (pd->cmd == SSS_PAM_OPEN_SESSION) {
+ if (pd->cmd == SSS_PAM_OPEN_SESSION &&
+ pd->pam_status == PAM_SUCCESS) {
/* Try to fetch data from sysdb
* (auth already passed -> we should have them) */
ret = get_selinux_string(preq);