From 3db7aca0479a30f4a1e66a35b4b7b7bcfd81a78f Mon Sep 17 00:00:00 2001
From: Ariel Barria <arielb@fedoraproject.org>
Date: Thu, 10 May 2012 22:18:52 -0500
Subject: Bad check for id_provider=local and access_provider=permit

documentation-access_provider

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
---
 src/confdb/confdb.c     | 2 +-
 src/man/sssd.conf.5.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/confdb/confdb.c b/src/confdb/confdb.c
index 1c5e40cd1..3f1352138 100644
--- a/src/confdb/confdb.c
+++ b/src/confdb/confdb.c
@@ -770,7 +770,7 @@ static int confdb_get_domain_internal(struct confdb_ctx *cdb,
         tmp = ldb_msg_find_attr_as_string(res->msgs[0],
                                           CONFDB_DOMAIN_ACCESS_PROVIDER,
                                           NULL);
-        if (tmp && strcasecmp(tmp, "local") != 0) {
+        if (tmp && strcasecmp(tmp, "permit") != 0) {
             DEBUG(0, ("Local ID provider does not support [%s] as an ACCESS provider.\n", tmp));
             ret = EINVAL;
             goto done;
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index 1332f2891..e283480e3 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -1075,7 +1075,7 @@
                             Internal special providers are:
                         </para>
                         <para>
-                            <quote>permit</quote> always allow access.
+                            <quote>permit</quote> always allow access. It's the only permitted access provider for a local domain.
                         </para>
                         <para>
                             <quote>deny</quote> always deny access.
-- 
cgit