[SSSD] [PATCH] Bad check for id_provider=local and access_provider=permit

Stephen Gallagher sgallagh at redhat.com
Thu May 10 17:05:42 UTC 2012


On Thu, 2012-05-10 at 11:56 -0500, Ariel Barria wrote:
> Thanks for explanation :).
> Something like that?
> 
> tmp =
> ldb_msg_find_attr_as_string(res->msgs[0],CONFDB_DOMAIN_ACCESS_PROVIDER,NULL);
>         if (tmp && strcasecmp(tmp, "permit") != 0) {
>             .......
>             
> And documentatión
> 
>  <term>access_provider (string)</term>
>          <listitem>
>                 <para>
>                            The access control provider used for the
> domain.
>                             There are two built-in access providers
> (in
>                             addition to any included in installed
> backends)
>                             Internal special providers are:
>                         </para>
>                         <para>
>                             <quote>permit</quote> always allow access.
> It's the only permitted access provider for a local domain. 

Yes, this looks more like what we need here.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120510/ffdf30af/attachment.sig>


More information about the sssd-devel mailing list