[SSSD] [PATCH] Make 'permit' the default for the access target

Sumit Bose sbose at redhat.com
Wed Nov 11 22:10:59 UTC 2009


Hi,

this patch make 'permit' the default for the access target. This means
that access_provider has to be set explicitly if a specific provider
should be used, e.g. access_provider=ipa.

bye,
Sumit
-------------- next part --------------
>From ee3ff411494c7bae1158b7baef1adc24ebdbe342 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose at redhat.com>
Date: Wed, 11 Nov 2009 23:06:09 +0100
Subject: [PATCH] Make 'permit' the default for the access target

---
 server/man/sssd.conf.5.xml          |    4 +---
 server/providers/data_provider_be.c |   17 ++++-------------
 2 files changed, 5 insertions(+), 16 deletions(-)

diff --git a/server/man/sssd.conf.5.xml b/server/man/sssd.conf.5.xml
index c342499..4facea6 100644
--- a/server/man/sssd.conf.5.xml
+++ b/server/man/sssd.conf.5.xml
@@ -513,9 +513,7 @@
                             <quote>deny</quote> always deny access.
                         </para>
                         <para>
-                            Default: <quote>id_provider</quote> is used if it
-                            is set and can handle access control requests or
-                            <quote>permit</quote> otherwise.
+                            Default: <quote>permit</quote>
                         </para>
                     </listitem>
                 </varlistentry>
diff --git a/server/providers/data_provider_be.c b/server/providers/data_provider_be.c
index b20ac1f..d5c2492 100644
--- a/server/providers/data_provider_be.c
+++ b/server/providers/data_provider_be.c
@@ -1039,20 +1039,11 @@ int be_process_init(TALLOC_CTX *mem_ctx,
                   "from provider [%s].\n", ctx->bet_info[BET_AUTH].mod_name));
     }
 
-    ret = load_backend_module(ctx, BET_ACCESS,
-                              &ctx->bet_info[BET_ACCESS],
-                              ctx->bet_info[BET_ID].mod_name);
+    ret = load_backend_module(ctx, BET_ACCESS, &ctx->bet_info[BET_ACCESS],
+                              ACCESS_PERMIT);
     if (ret != EOK) {
-        if (ret != ENOENT) {
-            DEBUG(0, ("No ACCESS backend target available.\n"));
-            return ret;
-        }
-        ret = load_backend_module(ctx, BET_ACCESS,
-                                  &ctx->bet_info[BET_ACCESS], ACCESS_PERMIT);
-        if (ret != EOK) {
-            DEBUG(0, ("Failed to set ACCESS backend to default (permit).\n"));
-            return ret;
-        }
+        DEBUG(0, ("Failed to setup ACCESS backend.\n"));
+        return ret;
     }
     DEBUG(9, ("ACCESS backend target successfully loaded "
               "from provider [%s].\n", ctx->bet_info[BET_ACCESS].mod_name));
-- 
1.6.2.5



More information about the sssd-devel mailing list