summaryrefslogtreecommitdiff
path: root/server
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2009-11-11 23:06:09 +0100
committerStephen Gallagher <sgallagh@redhat.com>2009-11-12 11:00:50 -0500
commit0ec8cc5f817adb46402d10bb72a9e0dd6818e2a2 (patch)
tree9e4b15596fd4cd306d2f4f7943cf0acf5495ecbd /server
parent925056557b122408d928c43cac06549f7d8e57df (diff)
downloadsssd-0ec8cc5f817adb46402d10bb72a9e0dd6818e2a2.tar.gz
sssd-0ec8cc5f817adb46402d10bb72a9e0dd6818e2a2.tar.bz2
sssd-0ec8cc5f817adb46402d10bb72a9e0dd6818e2a2.zip
Make 'permit' the default for the access target
Diffstat (limited to 'server')
-rw-r--r--server/man/sssd.conf.5.xml4
-rw-r--r--server/providers/data_provider_be.c17
2 files changed, 5 insertions, 16 deletions
diff --git a/server/man/sssd.conf.5.xml b/server/man/sssd.conf.5.xml
index c3424992..4facea61 100644
--- a/server/man/sssd.conf.5.xml
+++ b/server/man/sssd.conf.5.xml
@@ -513,9 +513,7 @@
<quote>deny</quote> always deny access.
</para>
<para>
- Default: <quote>id_provider</quote> is used if it
- is set and can handle access control requests or
- <quote>permit</quote> otherwise.
+ Default: <quote>permit</quote>
</para>
</listitem>
</varlistentry>
diff --git a/server/providers/data_provider_be.c b/server/providers/data_provider_be.c
index b20ac1f0..d5c2492b 100644
--- a/server/providers/data_provider_be.c
+++ b/server/providers/data_provider_be.c
@@ -1039,20 +1039,11 @@ int be_process_init(TALLOC_CTX *mem_ctx,
"from provider [%s].\n", ctx->bet_info[BET_AUTH].mod_name));
}
- ret = load_backend_module(ctx, BET_ACCESS,
- &ctx->bet_info[BET_ACCESS],
- ctx->bet_info[BET_ID].mod_name);
+ ret = load_backend_module(ctx, BET_ACCESS, &ctx->bet_info[BET_ACCESS],
+ ACCESS_PERMIT);
if (ret != EOK) {
- if (ret != ENOENT) {
- DEBUG(0, ("No ACCESS backend target available.\n"));
- return ret;
- }
- ret = load_backend_module(ctx, BET_ACCESS,
- &ctx->bet_info[BET_ACCESS], ACCESS_PERMIT);
- if (ret != EOK) {
- DEBUG(0, ("Failed to set ACCESS backend to default (permit).\n"));
- return ret;
- }
+ DEBUG(0, ("Failed to setup ACCESS backend.\n"));
+ return ret;
}
DEBUG(9, ("ACCESS backend target successfully loaded "
"from provider [%s].\n", ctx->bet_info[BET_ACCESS].mod_name));