From 383fa7e69136ce27031d7d0b9b9b8e5b0392bfee Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Wed, 19 Sep 2012 10:27:58 +0200 Subject: KRB5 child: Don't return System Error on empty password https://fedorahosted.org/sssd/ticket/1310 --- src/providers/krb5/krb5_child.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/providers/krb5/krb5_child.c') diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c index dc2e3117..9665f45b 100644 --- a/src/providers/krb5/krb5_child.c +++ b/src/providers/krb5/krb5_child.c @@ -933,6 +933,9 @@ static int kerr_to_status(krb5_error_code kerr) KRB5_CHILD_DEBUG(SSSDBG_CRIT_FAILURE, kerr); switch (kerr) { + case KRB5_LIBOS_CANTREADPWD: + pam_status = PAM_CRED_UNAVAIL; + break; case KRB5_KDC_UNREACH: pam_status = PAM_AUTHINFO_UNAVAIL; break; @@ -942,6 +945,7 @@ static int kerr_to_status(krb5_error_code kerr) case KRB5KRB_AP_ERR_BAD_INTEGRITY: pam_status = PAM_AUTH_ERR; break; + case KRB5_PREAUTH_FAILED: case KRB5KDC_ERR_PREAUTH_FAILED: pam_status = PAM_CRED_ERR; break; -- cgit