On Wed, Oct 14, 2009 at 01:33:18PM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 10/14/2009 07:24 AM, Sumit Bose wrote:
> > Hi,
> >
> > if auth_provider is set to a provider which can handle change password
> > request, e.g. LDAP, but chpass_provider is not set at all the user might
> > be surprised that the password connet be changed. This patch sets
> > chpass_provider implicit if an auth_provider is available and can handle
> > change password requests. If you want to disallow password changes
> > explicitly use 'chpass_provider = none'.
> >
> > This patch should fix one part of #220.
> >
> > bye,
> > Sumit
> >
> >
> >
> > _______________________________________________
> > sssd-devel mailing list
> > sssd-devel(a)lists.fedorahosted.org
> >
https://fedorahosted.org/mailman/listinfo/sssd-devel
>
> As discussed on IRC, if auth_provider is unspecified, we should use
> id_provider as the default for both auth_provider and access_provider
> (if the id_provider offers that option).
>
> I think access provider should default to 'permit' unless otherwise
> specified.
>
>
> - --
> Stephen Gallagher
> RHCE 804006346421761
>
ok, I've created a new patch (0002) with the changes, 0001 is rebased
but unchanged. I've also added a 'deny' option for access_provider and a
man page entry.
bye,
Sumit