diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-20 15:22:35 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-20 15:22:35 +0000 |
| commit | 5d14aabf1d1d96dd8f6ec594ee65863ddbfc087a (patch) | |
| tree | e2579d97e9db101bab6d2512206b2911d91f7c35 /src/providers/ipa/ipa_auth.c | |
| parent | Adding debian version 2.9.4-2. (diff) | |
| download | sssd-5d14aabf1d1d96dd8f6ec594ee65863ddbfc087a.tar.xz sssd-5d14aabf1d1d96dd8f6ec594ee65863ddbfc087a.zip | |
Merging upstream version 2.9.5.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'src/providers/ipa/ipa_auth.c')
| -rw-r--r-- | src/providers/ipa/ipa_auth.c | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_auth.c b/src/providers/ipa/ipa_auth.c index 1d61a10..e5e1bf3 100644 --- a/src/providers/ipa/ipa_auth.c +++ b/src/providers/ipa/ipa_auth.c @@ -258,6 +258,19 @@ static void ipa_pam_auth_handler_krb5_done(struct tevent_req *subreq) if (dp_err != DP_ERR_OK) { goto done; } + if (state->pd->cmd == SSS_PAM_CHAUTHTOK_PRELIM + && state->pd->pam_status == PAM_TRY_AGAIN) { + /* Reset this to fork a new krb5_child in handle_child_send() */ + state->pd->child_pid = 0; + subreq = krb5_auth_queue_send(state, state->ev, state->be_ctx, state->pd, + state->auth_ctx->krb5_auth_ctx); + if (subreq == NULL) { + goto done; + } + + tevent_req_set_callback(subreq, ipa_pam_auth_handler_retry_done, req); + return; + } if (state->pd->cmd == SSS_PAM_AUTHENTICATE && state->pd->pam_status == PAM_CRED_ERR |