From ee02e59e4d966f44c7a48ad04474156fc65d7006 Mon Sep 17 00:00:00 2001 From: Pavel Březina Date: Mon, 17 Jun 2013 10:31:02 +0200 Subject: handle ERR_ACCOUNT_EXPIRED properly https://fedorahosted.org/sssd/ticket/1953 --- src/providers/ldap/ldap_access.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'src/providers/ldap/ldap_access.c') diff --git a/src/providers/ldap/ldap_access.c b/src/providers/ldap/ldap_access.c index 4a06e66b..bb5c37f4 100644 --- a/src/providers/ldap/ldap_access.c +++ b/src/providers/ldap/ldap_access.c @@ -34,7 +34,8 @@ static void sdap_access_reply(struct be_req *be_req, int pam_status) pd = talloc_get_type(be_req_get_data(be_req), struct pam_data); pd->pam_status = pam_status; - if (pam_status == PAM_SUCCESS || pam_status == PAM_PERM_DENIED) { + if (pam_status == PAM_SUCCESS || pam_status == PAM_PERM_DENIED + || pam_status == PAM_ACCT_EXPIRED) { be_req_terminate(be_req, DP_ERR_OK, pam_status, NULL); } else { be_req_terminate(be_req, DP_ERR_FATAL, pam_status, NULL); @@ -82,6 +83,9 @@ static void sdap_access_done(struct tevent_req *req) case ERR_ACCESS_DENIED: pam_status = PAM_PERM_DENIED; break; + case ERR_ACCOUNT_EXPIRED: + pam_status = PAM_ACCT_EXPIRED; + break; default: DEBUG(SSSDBG_CRIT_FAILURE, ("Error retrieving access check result.\n")); pam_status = PAM_SYSTEM_ERR; -- cgit