URL: https://github.com/SSSD/sssd/pull/5503 Author: stanislavlevin Title: #5503: pam_sss: Don't fail on deskprofiles phase for AD users Action: synchronized
To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5503/head:pr5503 git checkout pr5503
From 9397cd29e9b99201d09e42cd8292b6c577c787c9 Mon Sep 17 00:00:00 2001 From: Stanislav Levin <s...@altlinux.org> Date: Fri, 12 Feb 2021 10:51:30 +0300 Subject: [PATCH] pam_sss: Don't fail on deskprofiles phase for AD users By default (if session_provider is not none) during session setup pam_sss attempts to fetch desktop rules and profiles for user from IPA domain. As part of this job, the data provider looks for the user info(uid and gid) in IPA domain but fails to do that for AD user from a trusted domain returning PAM_SESSION_ERR. The requested target domain has been already found in `dp_req_new` and may be referenced as `params->domain`. This change doesn't introduce the possibility to fetch deskprofiles for AD users, but at least, doesn't break PAM authentication for them. Resolves: https://github.com/SSSD/sssd/issues/5499 Signed-off-by: Stanislav Levin <s...@altlinux.org> --- src/providers/ipa/ipa_session.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/providers/ipa/ipa_session.c b/src/providers/ipa/ipa_session.c index 935393ccd6..267c978afe 100644 --- a/src/providers/ipa/ipa_session.c +++ b/src/providers/ipa/ipa_session.c @@ -510,7 +510,7 @@ ipa_pam_session_handler_send(TALLOC_CTX *mem_ctx, * that this operation is done. */ ret = ipa_pam_session_handler_get_deskprofile_user_info( state, - state->be_ctx->domain, + params->domain, pd->user, &state->shortname, &state->domain,
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
