diff options
| author | Dave Olson <olson@cumulusnetworks.com> | 2017-08-07 20:33:20 -0700 |
|---|---|---|
| committer | Dave Olson <olson@cumulusnetworks.com> | 2017-08-07 20:49:43 -0700 |
| commit | 4e5193a09c14c81081e65b27289f15f4620f716d (patch) | |
| tree | c9aab39784676529895b40f0b3c5e2608f34008d /map_common.c | |
| parent | d80fcfbb3c55561110bf0686c87fb949f866a88c (diff) | |
| download | libnss-mapuser-4e5193a09c14c81081e65b27289f15f4620f716d.tar.gz libnss-mapuser-4e5193a09c14c81081e65b27289f15f4620f716d.zip | |
Do not use mapuser functionality with useradd,userdel,usermod
Ticket: CM-17450
Reviewed By: olson
Testing Done: ran programs with change
The useradd family will not work correctly with the mapuser/mapuid
functionality, and useradd provides no method to force creating
a user that already exists.
So check which program invoked us, using __progname (getprogname() could
also be used for non-glibc use), and return NOTFOUND immediately in that
case.
This is a major hack, but it's simple, and avoids a significant issue.
Unfortunately, the RADIUS protocol gives us no way to determine that
an account name is valid without also authenticating, and libnss plugins
do not have the ability to authenticate.
Diffstat (limited to 'map_common.c')
0 files changed, 0 insertions, 0 deletions