From: Howard Chu <hyc@openldap.org>
Date: Tue, 29 Sep 2009 08:30:21 +0000 (+0000)
Subject: Fix authz return code checking
X-Git-Tag: ACLCHECK_0~203
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=e2dd639931a877a9cce3162397f110fe339a5107;p=openldap

Fix authz return code checking
---

diff --git a/contrib/slapd-modules/nssov/nss-ldapd/nss/pam.c b/contrib/slapd-modules/nssov/nss-ldapd/nss/pam.c
index abeae198e3..3a35c4d5a7 100644
--- a/contrib/slapd-modules/nssov/nss-ldapd/nss/pam.c
+++ b/contrib/slapd-modules/nssov/nss-ldapd/nss/pam.c
@@ -441,6 +441,7 @@ int pam_sm_acct_mgmt(
 		if (rc != PAM_IGNORE)
 			pam_warn(appconv, "LDAP authorization failed", PAM_ERROR_MSG, no_warn);
 	} else {
+		rc = ctx2.authz;
 		if (ctx2.authzmsg && ctx2.authzmsg[0])
 			pam_warn(appconv, ctx2.authzmsg, PAM_TEXT_INFO, no_warn);
 		if (ctx2.authz == PAM_SUCCESS) {