Re: [SSSD] [PATCH] PAM: new option pam_trusted_users

[Pavel Reichl]

Hello,

please see attached patch, which is amended Daniel Gollubs' patch from 
thread

[SSSD] [PATCH] PAM: Add domains= option to pam_sss (https://lists.fedorahosted.org/pipermail/sssd-devel/2014-July/020867.html).

I have just fixed nitpick found by Jakub and rebased it on top of previous patch in this thread.

and I also changed this:

Because I think dom->name would be uninitialized. However, I haven't 
tested this patch.

@@ -836,12 +867,22 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd)
              ret = ENOENT;
              goto done;
          }

/* skip this domain if not requested */
-        if (!is_domain_requested(pd, dom->name)) {
+        if (!is_domain_requested(pd, pd->domain)) {
        ret = ENOENT;
        goto done;
    }

Thanks!

On 09/27/2014 12:39 PM, Pavel Reichl wrote:
> Attached patch now contains both options.
>
> Thanks.
>
> On 09/25/2014 03:57 PM, Pavel Reichl wrote:
> > Hello,
> >
> > please see attached patch which adds first of two options proposed in 
> > https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM
> >
> > Thanks!
> >
> > sssd-devel mailing list
> > [e-mail]
> > https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
> sssd-devel mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel