diff options
| author | Lennart Poettering <lennart@poettering.net> | 2020-09-02 16:35:22 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2020-09-21 18:02:31 +0200 |
| commit | 51a95db6dcb720608eccaac01328b66ef7cc0d30 (patch) | |
| tree | 9606d56b7f2bbf25bf3bf1235a102eaa4ac21870 /src/home/pam_systemd_home.c | |
| parent | 55e11ace688aa5d0605baaaf4d88574c1b8b2911 (diff) | |
| download | systemd-51a95db6dcb720608eccaac01328b66ef7cc0d30.tar.gz | |
homed: don't block logins into accounts with future change time
This might happen if the system clock is wrong, and we should allow
access in this case (though certainly log about it).
Diffstat (limited to 'src/home/pam_systemd_home.c')
| -rw-r--r-- | src/home/pam_systemd_home.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/home/pam_systemd_home.c b/src/home/pam_systemd_home.c index 13b164ecfc..db182dc999 100644 --- a/src/home/pam_systemd_home.c +++ b/src/home/pam_systemd_home.c @@ -846,8 +846,8 @@ _public_ PAM_EXTERN int pam_sm_acct_mgmt( switch (r) { case -ESTALE: - (void) pam_prompt(handle, PAM_ERROR_MSG, NULL, "User record is newer than current system time, prohibiting access."); - return PAM_ACCT_EXPIRED; + pam_syslog(handle, LOG_WARNING, "User record for '%s' is newer than current system time, assuming incorrect system clock, allowing access.", ur->user_name); + break; case -ENOLCK: (void) pam_prompt(handle, PAM_ERROR_MSG, NULL, "User record is blocked, prohibiting access."); |