From d4080fe3e5e25562d2dee8b4ae72064d9d72c0bc Mon Sep 17 00:00:00 2001
From: Jan Zeleny <jzeleny@redhat.com>
Date: May 22 2012 17:23:08 +0000
Subject: Fixed issue in SELinux user maps


There was an issue when IPA provider didn't set PAM_SUCCESS when
successfully finished loading SELinux user maps. This lead to the map
not being read in the responder.

---

diff --git a/src/providers/ipa/ipa_session.c b/src/providers/ipa/ipa_session.c
index e23b012..238acdd 100644
--- a/src/providers/ipa/ipa_session.c
+++ b/src/providers/ipa/ipa_session.c
@@ -104,6 +104,7 @@ static void ipa_session_handler_done(struct tevent_req *req)
     struct sysdb_attrs **maps;
     bool in_transaction = false;
     char *default_user;
+    struct pam_data *pd = talloc_get_type(breq->req_data, struct pam_data);
     char *map_order;
 
     ret = ipa_get_selinux_recv(req, breq, &map_count, &maps,
@@ -140,6 +141,7 @@ static void ipa_session_handler_done(struct tevent_req *req)
     in_transaction = false;
 
 
+    pd->pam_status = PAM_SUCCESS;
     breq->fn(breq, DP_ERR_OK, EOK, "Success");
     return;