From 747e404e3716cbe3a4daf69b5408c69de4a5966a Mon Sep 17 00:00:00 2001

From: Tomas Mraz <tmraz@fedoraproject.org>

Date: Mon, 15 May 2017 15:49:34 +0200

Subject: [PATCH 1/2] pam_succeed_if can return PAM_IGNORE in pam_setcred() we

 must ignore it.

This fixes rhbz#1450425.

---

 authinfo.py | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/authinfo.py b/authinfo.py

index 51f66046b11b500a6c16832f43f94850a9800cf1..2d133803e79deb1a022bb0982fc982608160cc9a 100644

--- a/authinfo.py

+++ b/authinfo.py

@@ -131,7 +131,7 @@ LOGIC_FORCE_PKCS11_KRB5 = "[success=ok ignore=2 default=die]"

 LOGIC_SKIPNEXT = "[success=1 default=ignore]"

 LOGIC_SKIPNEXT3 = "[success=3 default=ignore]"

 LOGIC_ALWAYS_SKIP = "[default=1]"

-LOGIC_SKIPNEXT_ON_FAILURE = "[default=1 success=ok]"

+LOGIC_SKIPNEXT_ON_FAILURE = "[default=1 ignore=ignore success=ok]"

 # Snip off line terminators and final whitespace from a passed-in string.

 def snipString(s):

-- 

2.9.3