From 19100004b96ec64a6a2607106c35d8685b7355e6 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Tue, 9 Nov 2010 12:53:04 +0100
Subject: [PATCH 6/9] Add support for server-side pam response messages

---
 src/providers/data_provider.h  |    8 ++++++++
 src/responder/pam/pamsrv_cmd.c |    2 ++
 2 files changed, 10 insertions(+), 0 deletions(-)

diff --git a/src/providers/data_provider.h b/src/providers/data_provider.h
index 6fe3b3b..e55b4ab 100644
--- a/src/providers/data_provider.h
+++ b/src/providers/data_provider.h
@@ -193,6 +193,14 @@ struct pam_data {
 };
 
 /* from dp_auth_util.c */
+#define SSS_SERVER_INFO 0x80000000
+
+#define SSS_KRB5_INFO 0x40000000
+#define SSS_LDAP_INFO 0x20000000
+#define SSS_PROXY_INFO 0x10000000
+
+#define SSS_KRB5_INFO_TGT_LIFETIME (SSS_SERVER_INFO|SSS_KRB5_INFO|0x01)
+
 errno_t copy_pam_data(TALLOC_CTX *mem_ctx, struct pam_data *old_pd,
                       struct pam_data **new_pd);
 void pam_print_data(int l, struct pam_data *pd);
diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 25031e1..27a6195 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -373,6 +373,8 @@ static errno_t filter_responses(struct response_data *resp_list,
                 default:
                     DEBUG(7, ("User info type [%d] not filtered.\n"));
             }
+        } else if (resp->type & SSS_SERVER_INFO) {
+            resp->do_not_send_to_client = true;
         }
 
         resp = resp->next;
-- 
1.7.3.2