Report an error if one of the modules in the chain does not implement
the requested primitive. This is a significant change, but it should only affect poorly-written PAM modules, and the alternative is a potential fail-open situation. git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@501 185d5e19-27fe-0310-9dcf-9bff6b9f3609
This commit is contained in:
parent
229c006c86
commit
996a845863
|
@ -105,7 +105,7 @@ openpam_dispatch(pam_handle_t *pamh,
|
|||
if (chain->module->func[primitive] == NULL) {
|
||||
openpam_log(PAM_LOG_ERROR, "%s: no %s()",
|
||||
chain->module->path, pam_sm_func_name[primitive]);
|
||||
continue;
|
||||
r = PAM_SYSTEM_ERR;
|
||||
} else {
|
||||
pamh->primitive = primitive;
|
||||
pamh->current = chain;
|
||||
|
|
Loading…
Reference in New Issue