From 86816db5982df0c1b0c5f5722e23111c62ff362e Mon Sep 17 00:00:00 2001

--- src/sss_client/pam_sss.c.orig	2013-11-06 13:35:03.000000000 -0500

From: Lukas Slebodnik <lukas.slebodnik@intrak.sk>

+++ src/sss_client/pam_sss.c	2014-02-07 12:38:51.000000000 -0500

Date: Sat, 27 Jul 2013 15:02:31 +0200

@@ -52,6 +52,7 @@

Subject: [PATCH 31/34] patch-src__sss_client__pam_sss.c

 #define FLAGS_USE_FIRST_PASS (1 << 0)

 #define FLAGS_FORWARD_PASS   (1 << 1)

---

 #define FLAGS_USE_AUTHTOK    (1 << 2)

 src/sss_client/pam_sss.c | 2 ++

+#define FLAGS_IGNORE_UNKNOWN_USER (1 << 3)

 1 file changed, 2 insertions(+)

 #define PWEXP_FLAG "pam_sss:password_expired_flag"

diff --git src/sss_client/pam_sss.c src/sss_client/pam_sss.c

 #define FD_DESTRUCTOR "pam_sss:fd_destructor"

index 3734c8f..7110d38 100644

@@ -125,10 +126,12 @@

--- src/sss_client/pam_sss.c

+++ src/sss_client/pam_sss.c

@@ -125,10 +125,12 @@ static void free_exp_data(pam_handle_t *pamh, void *ptr, int err)

-- 

@@ -1292,6 +1295,8 @@

1.8.0

             }

         } else if (strcmp(*argv, "quiet") == 0) {

             *quiet_mode = true;

+        } else if (strcmp(*argv, "ignore_unknown_user") == 0) {

+            *flags |= FLAGS_IGNORE_UNKNOWN_USER;

         } else {

             logger(pamh, LOG_WARNING, "unknown option: %s", *argv);

         }

@@ -1429,6 +1434,9 @@

     ret = get_pam_items(pamh, &pi);

     if (ret != PAM_SUCCESS) {

         D(("get items returned error: %s", pam_strerror(pamh,ret)));

+        if (flags & FLAGS_IGNORE_UNKNOWN_USER && ret == PAM_USER_UNKNOWN) {

+            ret = PAM_IGNORE;

+        }

         return ret;

     }