From 0ec8cc5f817adb46402d10bb72a9e0dd6818e2a2 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Wed, 11 Nov 2009 23:06:09 +0100
Subject: Make 'permit' the default for the access target

---
 server/man/sssd.conf.5.xml          |  4 +---
 server/providers/data_provider_be.c | 17 ++++-------------
 2 files changed, 5 insertions(+), 16 deletions(-)

(limited to 'server')

diff --git a/server/man/sssd.conf.5.xml b/server/man/sssd.conf.5.xml
index c34249924..4facea61b 100644
--- a/server/man/sssd.conf.5.xml
+++ b/server/man/sssd.conf.5.xml
@@ -513,9 +513,7 @@
                             <quote>deny</quote> always deny access.
                         </para>
                         <para>
-                            Default: <quote>id_provider</quote> is used if it
-                            is set and can handle access control requests or
-                            <quote>permit</quote> otherwise.
+                            Default: <quote>permit</quote>
                         </para>
                     </listitem>
                 </varlistentry>
diff --git a/server/providers/data_provider_be.c b/server/providers/data_provider_be.c
index b20ac1f03..d5c2492b0 100644
--- a/server/providers/data_provider_be.c
+++ b/server/providers/data_provider_be.c
@@ -1039,20 +1039,11 @@ int be_process_init(TALLOC_CTX *mem_ctx,
                   "from provider [%s].\n", ctx->bet_info[BET_AUTH].mod_name));
     }
 
-    ret = load_backend_module(ctx, BET_ACCESS,
-                              &ctx->bet_info[BET_ACCESS],
-                              ctx->bet_info[BET_ID].mod_name);
+    ret = load_backend_module(ctx, BET_ACCESS, &ctx->bet_info[BET_ACCESS],
+                              ACCESS_PERMIT);
     if (ret != EOK) {
-        if (ret != ENOENT) {
-            DEBUG(0, ("No ACCESS backend target available.\n"));
-            return ret;
-        }
-        ret = load_backend_module(ctx, BET_ACCESS,
-                                  &ctx->bet_info[BET_ACCESS], ACCESS_PERMIT);
-        if (ret != EOK) {
-            DEBUG(0, ("Failed to set ACCESS backend to default (permit).\n"));
-            return ret;
-        }
+        DEBUG(0, ("Failed to setup ACCESS backend.\n"));
+        return ret;
     }
     DEBUG(9, ("ACCESS backend target successfully loaded "
               "from provider [%s].\n", ctx->bet_info[BET_ACCESS].mod_name));
-- 
cgit