[SSSD] [PATCH] Bad check for id_provider=local and access_provider=permit

Jakub Hrozek jhrozek at redhat.com
Thu May 10 09:31:58 UTC 2012


On Thu, May 10, 2012 at 01:01:44AM -0500, Ariel Barria wrote:
>    apologize for the patch file name :D
> 
>    https://fedorahosted.org/sssd/ticket/1172

Hi Ariel,

thank you very much for the patch! The naming and formatting of the patch
is fine.

This approach would remove the startup error as described in the ticket
but maybe it would be better if the "permit" access provider because
that's what the local provider does internally anyway. It would also warn
administrators who tries to use some other access

So I think the proper fix would be to swap "local" for "permit" in the check.
We should probably also amend the documentation (src/man/sssd.conf.5.xml)
where the permit access provider is described to say that it's the only
allowed access provider for a local domain.



More information about the sssd-devel mailing list