mirror of
https://github.com/xcat2/confluent.git
synced 2025-01-18 05:33:17 +00:00
a009f4c6d1
Previously, any PAM result was treated as good. This isn't actually of practical value, since we need a user object to really do authorization. Change strategy to give pam a chance to deny anyone, but require the user to exist in confluent even if pam says the user is a valid one.