summaryrefslogtreecommitdiffstats
path: root/core/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth
diff options
context:
space:
mode:
authorSimon Rettberg2018-06-27 13:20:15 +0200
committerYour Name2018-06-27 13:20:15 +0200
commitb7c1937d5a9070ee29e2f988d22c7433037af568 (patch)
treef8267bda291a9796f703f17ab17e9f4e7acf7212 /core/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth
parent[run-virt] Increase timeout for dnbd3-fuse mount (diff)
downloadmltk-b7c1937d5a9070ee29e2f988d22c7433037af568.tar.gz
mltk-b7c1937d5a9070ee29e2f988d22c7433037af568.tar.xz
mltk-b7c1937d5a9070ee29e2f988d22c7433037af568.zip
[pam-slx-plug] Write user's LDAP attributes to .openslx/ldap
Also qury transitive group memberships of AD servers by setting the search base to the user's DN and then limiting the search scope to "base"
Diffstat (limited to 'core/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth')
-rwxr-xr-xcore/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth6
1 files changed, 5 insertions, 1 deletions
diff --git a/core/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth b/core/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth
index d140f78c..6f1dc0ae 100755
--- a/core/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth
+++ b/core/modules/pam-slx-plug/data/opt/openslx/pam/exec_auth
@@ -45,6 +45,7 @@ for auth_file in /opt/openslx/pam/auth-source.d/*; do
USER_GROUP=
USER_HOME=
USER_DN=
+ USER_INFO_FILE=
[ -f "$auth_file" ] || continue
. "$auth_file"
[ -n "$USER_UID" ] || continue
@@ -133,7 +134,10 @@ if [ -n "${REAL_ACCOUNT}" ]; then
echo "${REAL_ACCOUNT}" > "${TEMP_HOME_DIR}/.openslx/account"
chmod 0644 "${TEMP_HOME_DIR}/.openslx/account"
fi
-
+if [ -n "$USER_INFO_FILE" ] && [ -s "$USER_INFO_FILE" ]; then
+ mv -- "$USER_INFO_FILE" "${TEMP_HOME_DIR}/.openslx/ldap"
+ chmod 0644 "${TEMP_HOME_DIR}/.openslx/ldap"
+fi
###############################################################################
#