On Mon, 2012-05-07 at 15:25 +0200, Jakub Hrozek wrote:
I may have confused you, sorry. What I meant to say was that there
can
only be one provider type specified per provider. It's perfectly legal
to have, say, id_provider=ldap, auth_provider=krb5 and
access_provider=simple.
It's not supported to configure SSSD so that acess_provider=ldap,simple
etc.
In the case of access_provider, I think this is probably worth changing.
I can think of several examples where being able to use the ldap access
provider and the simple access provider together would be very useful.
I've opened an RFE on this:
https://fedorahosted.org/sssd/ticket/1326
For the time being, I think that the ID, AUTH and CHPASS providers
should remain single-valued, however.