#453 Replace pam status codes with sssd specific codes
Closed: Fixed None Opened 8 years ago by sbose.

Currently the authentication, access and change password targets are using pam status codes like PAM_SUCCESS and PAM_SYSTEM_ERR to indicate the result of an operation. This code is sent to the client by the PAM responder.

Using these codes is becoming complicated, because there are conditions which needs to handled internally, e.g. when an provider is offline, where there is no good matching PAM status code.

It would be very helpful to introduce a set of SSSD specific internal status codes and let the PAM responder choose the right PAM status code just before sending the response to the client.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.3

Fields changed

owner: somebody => sgallagh

Fields changed

milestone: SSSD 1.5.0 => SSSD 1.6.0

Fields changed

coverity: =>
milestone: SSSD 1.6.0 => SSSD 1.7.0
upgrade: => 0

This is out of scope of the 1.8 release.

milestone: SSSD 1.8.0 => SSSD 1.9.0
patch: => 0
rhbz: =>

Fields changed

blockedby: =>
blocking: =>
milestone: SSSD 1.9.0 => SSSD Deferred

Fields changed

rhbz: => 0

Fields changed

design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
milestone: SSSD Deferred => NEEDS_TRIAGE

When solving this ticket, we should also take care of the static inline in util/auth_utils.h. It's ugly and only a workaround until this ticket is fixed.

Moving to 1.10 and bumping it up.

milestone: NEEDS_TRIAGE => SSSD 1.10 beta
priority: minor => blocker
summary: Replace pam status codes with sssd specific codes => [RFE] Replace pam status codes with sssd specific codes

Fields changed

owner: sgallagh => simo
status: new => assigned

Fields changed

selected: => May

Fields changed

priority: blocker => critical

Fields changed

priority: critical => major

The patches are on the list already.

patch: 0 => 1

The last patch that would convert the simple access provider is on the list.

review: => 0

The simple access provider was converted in commit 18f01e6

resolution: => fixed
status: assigned => closed

Fields changed

changelog: =>
summary: [RFE] Replace pam status codes with sssd specific codes => Replace pam status codes with sssd specific codes
type: enhancement => task

Metadata Update from @sbose:
- Issue assigned to simo
- Issue set to the milestone: SSSD 1.10 beta

2 years ago

Login to comment on this ticket.

Metadata