[SSSD] [PATCH] set chpass_provider implicit if not set explicit
Stephen Gallagher
sgallagh at redhat.com
Wed Oct 14 17:33:18 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 10/14/2009 07:24 AM, Sumit Bose wrote:
> Hi,
>
> if auth_provider is set to a provider which can handle change password
> request, e.g. LDAP, but chpass_provider is not set at all the user might
> be surprised that the password connet be changed. This patch sets
> chpass_provider implicit if an auth_provider is available and can handle
> change password requests. If you want to disallow password changes
> explicitly use 'chpass_provider = none'.
>
> This patch should fix one part of #220.
>
> bye,
> Sumit
>
>
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
As discussed on IRC, if auth_provider is unspecified, we should use
id_provider as the default for both auth_provider and access_provider
(if the id_provider offers that option).
I think access provider should default to 'permit' unless otherwise
specified.
- --
Stephen Gallagher
RHCE 804006346421761
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkrWC1kACgkQeiVVYja6o6NuEgCdGtVHO5ywUhM5J8pX3C9nj05o
Cq0AoJ8GmK/RrM618pRKvXqZyb6Qxft3
=NdN1
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list