New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Check for Group membership before sending an email #43

Open

2 tasks

Jnchi opened this issue Jun 20, 2019 · 0 comments

Labels

Contributor

Jnchi commented Jun 20, 2019 •

edited

Loading

Don't send the OTP email unless the user is part of the appropriate group, (See: https://github.com/CyberNinjas/libnss_aad/blob/master/libnss_aad.c#L167).

    if (verify_user(jwt, user_addr) == 0 // <-- Check for username match in JWT
        && verify_group(ab_token, group_id, debug) == 0) { // <-- Check for group membership
        ret = EXIT_SUCCESS;
    }

Source: https://github.com/CyberNinjas/pam_aad/blob/master/pam_aad.c#L382-491

If user is not a member of the group, send an ACCESS DENIED email.

Jnchi added the enhancement label

oxr463 mentioned this issue

Check for Group membership before sending an email aad-for-linux/pam_aad#12

Open

2 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment