From 17baba6038f5be1a46009994ed9da658f77768ca Mon Sep 17 00:00:00 2001 From: Stephen Gallagher Date: Thu, 20 Aug 2009 10:33:00 -0400 Subject: [PATCH 1/5] Make the LOCAL provider always use MagicPrivateGroups Also updates the manpage for sssd.conf to denote this --- server/confdb/confdb.c | 3 ++- server/man/sssd.conf.5.xml | 8 +++++++- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/server/confdb/confdb.c b/server/confdb/confdb.c index a44368f..1d75074 100644 --- a/server/confdb/confdb.c +++ b/server/confdb/confdb.c @@ -756,7 +756,8 @@ int confdb_get_domain(struct confdb_ctx *cdb, } /* Determine if this is domain uses MPG */ - if (ldb_msg_find_attr_as_bool(res->msgs[0], CONFDB_MPG, 0)) { + if (strcasecmp(domain->provider, "local") || + ldb_msg_find_attr_as_bool(res->msgs[0], CONFDB_MPG, 0)) { domain->mpg = true; } diff --git a/server/man/sssd.conf.5.xml b/server/man/sssd.conf.5.xml index 6c5ce87..5d7e090 100644 --- a/server/man/sssd.conf.5.xml +++ b/server/man/sssd.conf.5.xml @@ -414,7 +414,13 @@ same effect as User Private Groups - Default: FALSE + Default: FALSE* + + + *Magic Private Groups are always enabled when + provider=local and this setting does not + affect that in any way. For other providers, + Magic Private Groups default to FALSE -- 1.6.2.5