<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Thanks for explanation :).<br>Something like that?<br><br>tmp = ldb_msg_find_attr_as_string(res->msgs[0],CONFDB_DOMAIN_ACCESS_PROVIDER,NULL);<br> <b><font style="font-size: 8pt;" size="1">if (tmp && strcasecmp(tmp, "permit") != 0) {</font></b><br> .......<br> <br>And documentatión<br><br> <term>access_provider (string)</term><br> <listitem><br> <para><br> The access control provider used for the domain.<br> There are two built-in access providers (in<br> addition to any included in installed backends)<br> Internal special providers are:<br> </para><br> <para><br> <font style="font-size: 8pt;" size="1"><b><quote>permit</quote> always allow access. It's the only permitted access provider for a local domain. </b></font><br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Thu, 10 May 2012 11:31:58 +0200<br>> From: jhrozek@redhat.com<br>> To: sssd-devel@lists.fedorahosted.org<br>> Subject: Re: [SSSD] [PATCH] Bad check for id_provider=local and access_provider=permit<br>> <br>> On Thu, May 10, 2012 at 01:01:44AM -0500, Ariel Barria wrote:<br>> > apologize for the patch file name :D<br>> > <br>> > https://fedorahosted.org/sssd/ticket/1172<br>> <br>> Hi Ariel,<br>> <br>> thank you very much for the patch! The naming and formatting of the patch<br>> is fine.<br>> <br>> This approach would remove the startup error as described in the ticket<br>> but maybe it would be better if the "permit" access provider because<br>> that's what the local provider does internally anyway. It would also warn<br>> administrators who tries to use some other access<br>> <br>> So I think the proper fix would be to swap "local" for "permit" in the check.<br>> We should probably also amend the documentation (src/man/sssd.conf.5.xml)<br>> where the permit access provider is described to say that it's the only<br>> allowed access provider for a local domain.<br>> _______________________________________________<br>> sssd-devel mailing list<br>> sssd-devel@lists.fedorahosted.org<br>> https://fedorahosted.org/mailman/listinfo/sssd-devel<br></div>                                            </div></body>
</html>