[SSSD] more_info for authz_provider?

Sumit Bose sbose at redhat.com
Tue Dec 22 08:30:25 UTC 2009


On Tue, Dec 22, 2009 at 02:41:28PM +1000, David O'Brien wrote:
> This relates to ticket #196
> 
> "We are changing the configuration file format of the SSSD to something 
> more readable. The format is described at SSSDConfVer2"
> 
> SSSDConfVer2 contains
> # Possible overrides
> # id_provider = local
> # auth_provider = local
> # authz_provider = local
> # passwd_provider = local
> 
> I'm assuming auth = authentication and authz = authorization
> None of the other domain definitions provide or allow for an authz 
> override. This might be perfectly logical - if you're using an ldap back 
> end then authz occurs via ldap and that's all?

authz_provider is not used the corresponding option is called
access_provider and is explained in sssd.conf(5). If you want to set
access_provider provider to anything other than 'permit' you have to set
is explicitly. There is no automatic override for access_provider.

HTH

bye,
Sumit



> 
> I'm also curious to know if this example file is still up to date. There 
> seems to be a limited use of proxy entries. Is the NIS example domain as 
> extensive as it might be?
> 
> thanks for any help and explanations.
> -- 
> 
> David O'Brien
> Red Hat Asia Pacific
> +61 7 3514 8189
> 
> http://freeipa.org/page/DocumentationPortal
> http://git.fedorahosted.org/git/ipadocs.git
> 
> He who asks is a fool for five minutes, but he who does not ask remains 
> a fool forever."
>   ~ Chinese proverb
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list