From 59a95122d6bf4e271e79443cfc8caab5831c2ae3 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Sun, 25 Aug 2013 15:22:36 +0200 Subject: PAC: Skip SIDs that cannot be resolved to domain --- src/responder/pac/pacsrv_cmd.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src/responder') diff --git a/src/responder/pac/pacsrv_cmd.c b/src/responder/pac/pacsrv_cmd.c index 0d812588..f6e8abaf 100644 --- a/src/responder/pac/pacsrv_cmd.c +++ b/src/responder/pac/pacsrv_cmd.c @@ -796,8 +796,10 @@ static errno_t pac_save_memberships_next(struct tevent_req *req) sid = pr_ctx->add_sids[state->sid_iter]; ret = responder_get_domain_by_id(pr_ctx->pac_ctx->rctx, sid, &grp_dom); if (ret != EOK) { - DEBUG(SSSDBG_OP_FAILURE, ("responder_get_domain_by_id failed.\n")); - return ret; + DEBUG(SSSDBG_MINOR_FAILURE, ("responder_get_domain_by_id failed, " \ + "will try next group\n")); + state->sid_iter++; + continue; } ret = pac_store_membership(state->pr_ctx, state->user_dn, sid, grp_dom); -- cgit