summaryrefslogtreecommitdiff
path: root/src/responder
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-08-07 11:25:20 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-08-08 00:44:19 +0200
commitddbe6bc5595767e52a3893355515fc260b8f4be4 (patch)
treeaac6c357f4670000f37ceae9d08a03e386e3449e /src/responder
parentdb440b3ba6b848010cf2a1fe9f76db394ce860da (diff)
downloadsssd-ddbe6bc5595767e52a3893355515fc260b8f4be4.tar.gz
sssd-ddbe6bc5595767e52a3893355515fc260b8f4be4.tar.bz2
sssd-ddbe6bc5595767e52a3893355515fc260b8f4be4.zip
PAM: Check negcache when searching for fully qualified users, too
Diffstat (limited to 'src/responder')
-rw-r--r--src/responder/pam/pamsrv_cmd.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 4e3bd79c..645f9357 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -806,6 +806,14 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd)
ret = ENOENT;
goto done;
}
+
+ ncret = sss_ncache_check_user(pctx->ncache, pctx->neg_timeout,
+ preq->domain, pd->user);
+ if (ncret == EEXIST) {
+ /* User found in the negative cache */
+ ret = ENOENT;
+ goto done;
+ }
} else {
for (dom = preq->cctx->rctx->domains;
dom;