-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/11/2011 11:12 AM, Sumit Bose wrote:
> On Fri, Feb 11, 2011 at 10:54:09AM -0500, Stephen Gallagher wrote:
> On 02/11/2011 09:52 AM, Stephen Gallagher wrote:
>>>> On 02/11/2011 09:31 AM, Simo Sorce wrote:
>>>>> On Fri, 11 Feb 2011 09:02:37 -0500
>>>>> Stephen Gallagher <sgall...@redhat.com> wrote:
>>>>
>>>>>>>> New patch that also changes error codes.  
>>>>>>>
>>>>>>>
>>>>>>> Ack.
>>>>>>>   
>>>>>>
>>>>>>
>>>>>> Revoking my ack. Further testing reveals that this broke something in
>>>>>> pam_sss and auth is now failing.
>>>>
>>>>> Changing the error codes revealed an issue in the pam paths.
>>>>> Updated patch to properly map errors from SST_STATUS_ errors to PAM_
>>>>> errors and properly check for PAM_ errors in the caller instead of
>>>>> NSS_STATUS_ errors.
>>>>
>>>>
>>>> Nack. This fixed an obvious bug, but it's not the one breaking auth.
>>>>
> 
> Turns out that this was in fact the right bug, but a missing "break"
> caused it to fall through to failure anyway.
> 
> Attached a new patch with a fix for this, as well as a clean up of our
> variable usage in that function (forcing too many different return types
> into the 'ret' variable is a recipe for mistakes)
> 
>> passes my tests.
> 
>> ACK

Pushed to master.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk1VYaAACgkQeiVVYja6o6MIiQCeLiWDScTUuCN9UvQCFyNg/kvi
rOcAoJ9PsMbjapqt6W85lgWz0tClDKqd
=Luwg
-----END PGP SIGNATURE-----
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel

Reply via email to