Skip groups that can't be resolved from GID to name

jhrozek / pam_hbac

A simple pam account module to process HBAC rules stored on an IPA server

GNU General Public License v3.0

10 stars 9 forks source link

Skip groups that can't be resolved from GID to name #108

Closed jhrozek closed 6 years ago

jhrozek commented 6 years ago

Some groups might not be resolvable. Current master (as of 1.0) would juts fail. We should rather skip the unresolvable GID, because with allow users only in effect, the worst that can happen is access denied which we would get one way or another.