[SSSD] [PATCH] set chpass_provider implicit if not set explicit

Stephen Gallagher sgallagh at redhat.com
Wed Oct 14 17:33:18 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/14/2009 07:24 AM, Sumit Bose wrote:
> Hi,
> 
> if auth_provider is set to a provider which can handle change password
> request, e.g. LDAP, but chpass_provider is not set at all the user might
> be surprised that the password connet be changed. This patch sets
> chpass_provider implicit if an auth_provider is available and can handle
> change password requests. If you want to disallow password changes
> explicitly use 'chpass_provider = none'.
> 
> This patch should fix one part of #220.
> 
> bye,
> Sumit
> 
> 
> 
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel

As discussed on IRC, if auth_provider is unspecified, we should use
id_provider as the default for both auth_provider and access_provider
(if the id_provider offers that option).

I think access provider should default to 'permit' unless otherwise
specified.


- -- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkrWC1kACgkQeiVVYja6o6NuEgCdGtVHO5ywUhM5J8pX3C9nj05o
Cq0AoJ8GmK/RrM618pRKvXqZyb6Qxft3
=NdN1
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list