From 424f26892d1b2587a806694820babf5754b8db66 Mon Sep 17 00:00:00 2001
From: Pavel Reichl <preichl@redhat.com>
Date: Thu, 19 Mar 2015 10:21:21 -0400
Subject: [PATCH 196/196] IPA: set EINVAL if dn can't be linearized

Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 131da4d9f40e0e407d7bcae18ff16507976bc6c7)
---
 src/providers/ipa/ipa_s2n_exop.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/providers/ipa/ipa_s2n_exop.c b/src/providers/ipa/ipa_s2n_exop.c
index 7e2b70b953075d33df10ea614c55ce5d25f49b9b..292f174257fbf6f6ebc8db6d1eb38cb4b5349b81 100644
--- a/src/providers/ipa/ipa_s2n_exop.c
+++ b/src/providers/ipa/ipa_s2n_exop.c
@@ -1284,6 +1284,7 @@ static errno_t process_members(struct sss_domain_info *domain,
                 dn_str = ldb_dn_get_linearized(msg->dn);
                 if (dn_str == NULL) {
                     DEBUG(SSSDBG_OP_FAILURE, "ldb_dn_get_linearized failed.\n");
+                    ret = EINVAL;
                     goto done;
                 }
 
-- 
2.1.0