summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJan Zeleny <jzeleny@redhat.com>2012-01-13 06:48:45 -0500
committerStephen Gallagher <sgallagh@redhat.com>2012-01-14 11:53:29 -0500
commite4ae14ff4b2b37ce2e356a77c687e33e6d5a2b33 (patch)
treefec5f599c1ef302b95b27477327a0a08419802d3
parent22c7230dc0c8d41a189eb758be78991d183de1f7 (diff)
downloadsssd-e4ae14ff4b2b37ce2e356a77c687e33e6d5a2b33.tar.gz
sssd-e4ae14ff4b2b37ce2e356a77c687e33e6d5a2b33.tar.bz2
sssd-e4ae14ff4b2b37ce2e356a77c687e33e6d5a2b33.zip
Add info about ipa_host_search_base to man page
Also add comment that setting ipa_hbac_support_srchost to False disables search filters given in ipa_host_search_base
-rw-r--r--src/man/sssd-ipa.5.xml29
1 files changed, 29 insertions, 0 deletions
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index d85ae86c..8d0796af 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -148,6 +148,30 @@
</varlistentry>
<varlistentry>
+ <term>ipa_host_search_base (string)</term>
+ <listitem>
+ <para>
+ Optional. Use the given string as search base for
+ host objects.
+ </para>
+ <para>
+ See <quote>ldap_search_base</quote> for
+ information about configuring multiple search
+ bases.
+ </para>
+ <para>
+ If filter is given in any of search bases and
+ <emphasis>ipa_hbac_support_srchost</emphasis>
+ is set to False, the filter will be ignored.
+ </para>
+ <para>
+ Default: the value of
+ <emphasis>ldap_search_base</emphasis>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>krb5_validate (boolean)</term>
<listitem>
<para>
@@ -245,6 +269,11 @@
to SSSD by PAM will be ignored.
</para>
<para>
+ Note that if set to <emphasis>False</emphasis>,
+ this option casuses filters given in
+ <emphasis>ipa_host_search_base</emphasis> to be ignored;
+ </para>
+ <para>
Default: false
</para>
</listitem>