From 2ec5bcb919856ec363f817e0f6515ef0f113150b Mon Sep 17 00:00:00 2001
From: Stephen Gallagher <sgallagh@redhat.com>
Date: Thu, 20 Aug 2009 10:33:00 -0400
Subject: Make the LOCAL provider always use MagicPrivateGroups

Also updates the manpage for sssd.conf to denote this
---
 server/confdb/confdb.c     | 3 ++-
 server/man/sssd.conf.5.xml | 8 +++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/server/confdb/confdb.c b/server/confdb/confdb.c
index a44368f95..1d750740a 100644
--- a/server/confdb/confdb.c
+++ b/server/confdb/confdb.c
@@ -756,7 +756,8 @@ int confdb_get_domain(struct confdb_ctx *cdb,
     }
 
     /* Determine if this is domain uses MPG */
-    if (ldb_msg_find_attr_as_bool(res->msgs[0], CONFDB_MPG, 0)) {
+    if (strcasecmp(domain->provider, "local") ||
+        ldb_msg_find_attr_as_bool(res->msgs[0], CONFDB_MPG, 0)) {
         domain->mpg = true;
     }
 
diff --git a/server/man/sssd.conf.5.xml b/server/man/sssd.conf.5.xml
index 6c5ce87a3..5d7e09067 100644
--- a/server/man/sssd.conf.5.xml
+++ b/server/man/sssd.conf.5.xml
@@ -414,7 +414,13 @@
                             same effect as User Private Groups
                         </para>
                         <para>
-                            Default: FALSE
+                            Default: FALSE*
+                        </para>
+                        <para>
+                            *Magic Private Groups are always enabled when
+                            provider=local and this setting does not
+                            affect that in any way. For other providers,
+                            Magic Private Groups default to FALSE
                         </para>
                     </listitem>
                 </varlistentry>
-- 
cgit