incusd/daemon: Handle authorization scriptlet reset

Signed-off-by: Benjamin Somers <[email protected]>
lxc · Nov 22, 2024 · 54f1402 · 54f1402
1 parent c1ef8c2
commit 54f1402
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/cmd/incusd/daemon.go b/cmd/incusd/daemon.go
@@ -2221,7 +2221,15 @@ func (d *Daemon) setupAuthorizationScriptlet(scriptlet string) error {
 		return fmt.Errorf("Failed saving authorization scriptlet: %w", err)
 	}
 
-	if scriptlet != "" {
+	if scriptlet == "" {
+		// Reset to default authorizer.
+		d.authorizer, err = auth.LoadAuthorizer(d.shutdownCtx, auth.DriverTLS, logger.Log, d.clientCerts)
+		if err != nil {
+			return err
+		}
+
+		return nil
+	} else {
 		// Fail if not using the default tls or scriptlet authorizer.
 		switch d.authorizer.(type) {
 		case *auth.TLS, *auth.Scriptlet: