From 424f26892d1b2587a806694820babf5754b8db66 Mon Sep 17 00:00:00 2001

From: Pavel Reichl <preichl@redhat.com>

Date: Thu, 19 Mar 2015 10:21:21 -0400

Subject: [PATCH 196/196] IPA: set EINVAL if dn can't be linearized

Reviewed-by: Sumit Bose <sbose@redhat.com>

(cherry picked from commit 131da4d9f40e0e407d7bcae18ff16507976bc6c7)

---

 src/providers/ipa/ipa_s2n_exop.c | 1 +

 1 file changed, 1 insertion(+)

diff --git a/src/providers/ipa/ipa_s2n_exop.c b/src/providers/ipa/ipa_s2n_exop.c

index 7e2b70b953075d33df10ea614c55ce5d25f49b9b..292f174257fbf6f6ebc8db6d1eb38cb4b5349b81 100644

--- a/src/providers/ipa/ipa_s2n_exop.c

+++ b/src/providers/ipa/ipa_s2n_exop.c

@@ -1284,6 +1284,7 @@ static errno_t process_members(struct sss_domain_info *domain,

                 dn_str = ldb_dn_get_linearized(msg->dn);

                 if (dn_str == NULL) {

                     DEBUG(SSSDBG_OP_FAILURE, "ldb_dn_get_linearized failed.\n");

+                    ret = EINVAL;

                     goto done;

                 }

-- 

2.1.0