From owner-freebsd-ports-bugs@FreeBSD.ORG Sat Feb 8 11:50:01 2014 Return-Path: Delivered-To: freebsd-ports-bugs@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id ACCFB267 for ; Sat, 8 Feb 2014 11:50:01 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 95E721505 for ; Sat, 8 Feb 2014 11:50:01 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id s18Bo1PE040044 for ; Sat, 8 Feb 2014 11:50:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.8/8.14.8/Submit) id s18Bo10q040043; Sat, 8 Feb 2014 11:50:01 GMT (envelope-from gnats) Date: Sat, 8 Feb 2014 11:50:01 GMT Message-Id: <201402081150.s18Bo10q040043@freefall.freebsd.org> To: freebsd-ports-bugs@FreeBSD.org Cc: From: Lukas Slebodnik Subject: Re: ports/186545: [PATCH] security/sssd: add ignore_unknown_user option to pam_sss X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Lukas Slebodnik List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Feb 2014 11:50:01 -0000 The following reply was made to PR ports/186545; it has been noted by GNATS. From: Lukas Slebodnik To: bug-followup@FreeBSD.org Cc: Subject: Re: ports/186545: [PATCH] security/sssd: add ignore_unknown_user option to pam_sss Date: Sat, 8 Feb 2014 12:39:09 +0100 On Fri, Feb 07, 2014 at 06:00:08PM +0000, Edwin Groothuis wrote: > Maintainer of security/sssd, > > Please note that PR ports/186545 has just been submitted. > > If it contains a patch for an upgrade, an enhancement or a bug fix > you agree on, reply to this email stating that you approve the patch > and a committer will take care of it. > > The full text of the PR can be found at: > http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/186545 > You are right. It is not possible to obtain the same behaviour like on linux. Openpam does not recognise following syntax. account [default=bad success=ok user_unknown=ignore] pam_sss.so This is the same problem like another PR http://www.freebsd.org/cgi/query-pr.cgi?pr=184464. I communicated with reporter privately and I have a prepared patch. It will be part of work on including openpam into sssd, because sssd is heavily patched on FreeBSD. BTW your patch solves the main issue, but there are another corner cases you did not identified. Thank you very much for report. I will wait until accepting solution by upstream. LS