From 2a283b7f55508f05e58e61490208b8464731dc40 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Fri, 10 Feb 2012 19:11:33 +0100
Subject: Only fetch SELinux string if the user is found

---
 src/responder/pam/pamsrv_cmd.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'src/responder')

diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 13dd09a9..bf511487 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -734,7 +734,8 @@ static void pam_reply(struct pam_auth_req *preq)
         return;
     }
 
-    if (pd->cmd == SSS_PAM_OPEN_SESSION) {
+    if (pd->cmd == SSS_PAM_OPEN_SESSION &&
+        pd->pam_status == PAM_SUCCESS) {
         /* Try to fetch data from sysdb
          * (auth already passed -> we should have them) */
         ret = get_selinux_string(preq);
-- 
cgit