[SSSD] [PATCH] Make 'permit' the default for the access target
Sumit Bose
sbose at redhat.com
Wed Nov 11 22:10:59 UTC 2009
Hi,
this patch make 'permit' the default for the access target. This means
that access_provider has to be set explicitly if a specific provider
should be used, e.g. access_provider=ipa.
bye,
Sumit
-------------- next part --------------
>From ee3ff411494c7bae1158b7baef1adc24ebdbe342 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose at redhat.com>
Date: Wed, 11 Nov 2009 23:06:09 +0100
Subject: [PATCH] Make 'permit' the default for the access target
---
server/man/sssd.conf.5.xml | 4 +---
server/providers/data_provider_be.c | 17 ++++-------------
2 files changed, 5 insertions(+), 16 deletions(-)
diff --git a/server/man/sssd.conf.5.xml b/server/man/sssd.conf.5.xml
index c342499..4facea6 100644
--- a/server/man/sssd.conf.5.xml
+++ b/server/man/sssd.conf.5.xml
@@ -513,9 +513,7 @@
<quote>deny</quote> always deny access.
</para>
<para>
- Default: <quote>id_provider</quote> is used if it
- is set and can handle access control requests or
- <quote>permit</quote> otherwise.
+ Default: <quote>permit</quote>
</para>
</listitem>
</varlistentry>
diff --git a/server/providers/data_provider_be.c b/server/providers/data_provider_be.c
index b20ac1f..d5c2492 100644
--- a/server/providers/data_provider_be.c
+++ b/server/providers/data_provider_be.c
@@ -1039,20 +1039,11 @@ int be_process_init(TALLOC_CTX *mem_ctx,
"from provider [%s].\n", ctx->bet_info[BET_AUTH].mod_name));
}
- ret = load_backend_module(ctx, BET_ACCESS,
- &ctx->bet_info[BET_ACCESS],
- ctx->bet_info[BET_ID].mod_name);
+ ret = load_backend_module(ctx, BET_ACCESS, &ctx->bet_info[BET_ACCESS],
+ ACCESS_PERMIT);
if (ret != EOK) {
- if (ret != ENOENT) {
- DEBUG(0, ("No ACCESS backend target available.\n"));
- return ret;
- }
- ret = load_backend_module(ctx, BET_ACCESS,
- &ctx->bet_info[BET_ACCESS], ACCESS_PERMIT);
- if (ret != EOK) {
- DEBUG(0, ("Failed to set ACCESS backend to default (permit).\n"));
- return ret;
- }
+ DEBUG(0, ("Failed to setup ACCESS backend.\n"));
+ return ret;
}
DEBUG(9, ("ACCESS backend target successfully loaded "
"from provider [%s].\n", ctx->bet_info[BET_ACCESS].mod_name));
--
1.6.2.5
More information about the sssd-devel
mailing list