auth: Fail request if last passdb is noauthenticate

diff --git a/src/auth/auth-request.c b/src/auth/auth-request.c
index 7040fad7f66d1e89038c9da384963c0f3cb0add1..15cffeb566a7fb8fabba2c39f289f46801dd33cb 100644 (file)
--- a/src/auth/auth-request.c
+++ b/src/auth/auth-request.c
@@ -746,6 +746,11 @@ auth_request_handle_passdb_callback(enum passdb_result *result,
                        request->passdbs_seen_internal_failure = TRUE;
                }
                return FALSE;
+       } else if (*result == PASSDB_RESULT_NEXT) {
+               /* admin forgot to put proper passdb last */
+               auth_request_log_error(request, AUTH_SUBSYS_DB,
+                       "Last passdb had noauthenticate field, cannot authenticate user");
+               *result = PASSDB_RESULT_INTERNAL_FAILURE;
        } else if (request->passdb_success) {
                /* either this or a previous passdb lookup succeeded. */
                *result = PASSDB_RESULT_OK;