mirror of
https://github.com/xcat2/confluent.git
synced 2025-04-16 10:09:31 +00:00
Previously, any PAM result was treated as good. This isn't actually of practical value, since we need a user object to really do authorization. Change strategy to give pam a chance to deny anyone, but require the user to exist in confluent even if pam says the user is a valid one.