From ee02e59e4d966f44c7a48ad04474156fc65d7006 Mon Sep 17 00:00:00 2001 From: Pavel Březina Date: Mon, 17 Jun 2013 10:31:02 +0200 Subject: handle ERR_ACCOUNT_EXPIRED properly https://fedorahosted.org/sssd/ticket/1953 --- src/providers/ipa/ipa_access.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/providers/ipa') diff --git a/src/providers/ipa/ipa_access.c b/src/providers/ipa/ipa_access.c index 3760c6f7..58539f4c 100644 --- a/src/providers/ipa/ipa_access.c +++ b/src/providers/ipa/ipa_access.c @@ -129,6 +129,10 @@ static void ipa_hbac_check(struct tevent_req *req) pd->pam_status = PAM_PERM_DENIED; be_req_terminate(be_req, DP_ERR_OK, pd->pam_status, NULL); return; + case ERR_ACCOUNT_EXPIRED: + pd->pam_status = PAM_ACCT_EXPIRED; + be_req_terminate(be_req, DP_ERR_OK, pd->pam_status, NULL); + return; default: /* We got an unexpected error. Return it as-is */ pd->pam_status = PAM_SYSTEM_ERR; -- cgit