[SSSD] more_info for authz_provider?
Sumit Bose
sbose at redhat.com
Tue Dec 22 08:30:25 UTC 2009
On Tue, Dec 22, 2009 at 02:41:28PM +1000, David O'Brien wrote:
> This relates to ticket #196
>
> "We are changing the configuration file format of the SSSD to something
> more readable. The format is described at SSSDConfVer2"
>
> SSSDConfVer2 contains
> # Possible overrides
> # id_provider = local
> # auth_provider = local
> # authz_provider = local
> # passwd_provider = local
>
> I'm assuming auth = authentication and authz = authorization
> None of the other domain definitions provide or allow for an authz
> override. This might be perfectly logical - if you're using an ldap back
> end then authz occurs via ldap and that's all?
authz_provider is not used the corresponding option is called
access_provider and is explained in sssd.conf(5). If you want to set
access_provider provider to anything other than 'permit' you have to set
is explicitly. There is no automatic override for access_provider.
HTH
bye,
Sumit
>
> I'm also curious to know if this example file is still up to date. There
> seems to be a limited use of proxy entries. Is the NIS example domain as
> extensive as it might be?
>
> thanks for any help and explanations.
> --
>
> David O'Brien
> Red Hat Asia Pacific
> +61 7 3514 8189
>
> http://freeipa.org/page/DocumentationPortal
> http://git.fedorahosted.org/git/ipadocs.git
>
> He who asks is a fool for five minutes, but he who does not ask remains
> a fool forever."
> ~ Chinese proverb
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
More information about the sssd-devel
mailing list