login-common: client-common-auth - Make final SASL server success response available...

diff --git a/src/login-common/client-common-auth.c b/src/login-common/client-common-auth.c
index c3c0973f8c7febd76ad5c6cabac3fe6133387fc1..0ab306c21593ce57bc0d65fa263c8a5b6f1d02d3 100644 (file)
--- a/src/login-common/client-common-auth.c
+++ b/src/login-common/client-common-auth.c
@@ -939,6 +939,7 @@ sasl_callback(struct client *client, enum sasl_server_reply sasl_reply,
                if (!client_auth_reply_args(client, sasl_reply,
                                            data, args, &reply))
                        break;
+               reply.final_reply = data;
 
                client_auth_result(client, CLIENT_AUTH_RESULT_SUCCESS,
                                   &reply, NULL);

diff --git a/src/login-common/client-common.h b/src/login-common/client-common.h
index cfcfe798c6eaea7c03e4420d8d88cec1a8e7d00b..cb9e3a2f2973d78ac490cbef972450e4e3929325 100644 (file)
--- a/src/login-common/client-common.h
+++ b/src/login-common/client-common.h
@@ -107,6 +107,10 @@ struct client_auth_reply {
        unsigned int proxy_refresh_secs;
        unsigned int proxy_host_immediate_failure_after_secs;
 
+       /* final SASL success reply (challenge) sent by server
+          (only used when login_binary->sasl_support_final_reply == TRUE) */
+       const char *final_reply;
+
        /* all the key=value fields returned by passdb */
        const char *const *all_fields;