Skip to content

minor: modifying do_authentication to return PAM_AUTHINFO_UNAVAIL when no device is found - #390

Open
rwardd wants to merge 1 commit into
Yubico:mainfrom
rwardd:rwardd/modify-no-device-retval
Open

minor: modifying do_authentication to return PAM_AUTHINFO_UNAVAIL when no device is found#390
rwardd wants to merge 1 commit into
Yubico:mainfrom
rwardd:rwardd/modify-no-device-retval

Conversation

@rwardd

@rwardd rwardd commented May 4, 2026

Copy link
Copy Markdown

Currently, do_authentication returns PAM_AUTH_ERR all devices listed in the authfile are not present. This PR changes the retval to PAM_AUTHINFO_UNAVAIL as a more appropriate return value. This is useful in combination with faillock, when a tally is not meant to be recorded when a device is not present.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant