diff options
| author | Arthur de Jong <arthur@arthurdejong.org> | 2020-09-11 20:53:15 +0200 |
|---|---|---|
| committer | Arthur de Jong <arthur@arthurdejong.org> | 2020-09-11 20:53:25 +0200 |
| commit | 37a00e988304dd8b3b04886b56ecc713347f596f (patch) | |
| tree | e755d57588483c4e554186b82de5ba8d3584655f /common/expr.h | |
| parent | 18740fbc730327ddfc10d8e77a419dcd1320718c (diff) | |
Fix handling of the pam_authc_ppolicy option
Check the result of the BIND operation instead of that of the
ldap_result() call when pam_authc_ppolicy is set to "no".
This could have resulted in successful authentication if the BIND
operation to the LDAP server timed out and pam_authc_ppolicy was set to
"no" but should not result in successful authentication otherwise so it
is unlikely that setting pam_authc_ppolicy to "no" ever worked as
intended. The timeout also would have to occur on the BIND operation,
not on setting up the connection.
Fixes 31cd2cf
Diffstat (limited to 'common/expr.h')
0 files changed, 0 insertions, 0 deletions