From cb166c8cfcbd599306da453c80831194128a5cb0 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Thu, 11 Sep 2014 14:30:00 +0200
Subject: Use SSL for AD-LDAP-connections

---
 data/ad/mountscript | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'data')

diff --git a/data/ad/mountscript b/data/ad/mountscript
index 2256904..74c511e 100644
--- a/data/ad/mountscript
+++ b/data/ad/mountscript
@@ -9,7 +9,7 @@ if ! grep -q "^${PAM_USER}:" "/etc/passwd"; then
 	# determine fileserver and share for home directories
 	touch "/tmp/ldapsearch.${PAM_USER}"
 	chmod 0600 "/tmp/ldapsearch.${PAM_USER}"
-	ldapsearch -x -LLL uid="${PAM_USER}" homeMount > "/tmp/ldapsearch.${PAM_USER}" || \
+	ldapsearch -x -LLL uid="${PAM_USER}" homeMount > "/tmp/ldapsearch.${PAM_USER}" 2>/dev/null || \
 	{ slxlog "pam-ad-ldapquery" "Could not query LDAP server for parameters of user '${PAM_USER}'."; exit 1; }
 	VOLUME=$(cat "/tmp/ldapsearch.${PAM_USER}" | grep ^homeMount | head -n 1 | cut -d" " -f2)
 	[ -z "${VOLUME}" ] && slxlog "pam-ad-ldapvolume" "LDAP server did not provide 'homeMount'. Aborting mount for ${PAM_USER}." && exit 1
-- 
cgit v1.2.3-55-g7522