diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-06-17 09:32:07 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-06-28 22:22:20 +0200 |
| commit | 0249e8d37920f59fd70bdafa4f6706a05ae523c1 (patch) | |
| tree | ece7563cc8939b0c7948aa36812a52b70dbb06da /src/config/etc/sssd.api.d | |
| parent | 9822d4d468ec74e4e173f5adf0db12d02974cd18 (diff) | |
| download | sssd-0249e8d37920f59fd70bdafa4f6706a05ae523c1.tar.gz sssd-0249e8d37920f59fd70bdafa4f6706a05ae523c1.tar.bz2 sssd-0249e8d37920f59fd70bdafa4f6706a05ae523c1.zip | |
IPA: Add a server mode option
https://fedorahosted.org/sssd/ticket/1993
SSSD needs to know that it is running on an IPA server and should not
look up trusted users and groups with the help of the extdom plugin
but do the lookups on its own. For this a new boolean configuration
option, is introduced which defaults to false but is set to true during
ipa-server-install or during updates of the FreeIPA server if it is not
already set.
Diffstat (limited to 'src/config/etc/sssd.api.d')
| -rw-r--r-- | src/config/etc/sssd.api.d/sssd-ipa.conf | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/config/etc/sssd.api.d/sssd-ipa.conf b/src/config/etc/sssd.api.d/sssd-ipa.conf index 8a7e75f2..bc14fbe3 100644 --- a/src/config/etc/sssd.api.d/sssd-ipa.conf +++ b/src/config/etc/sssd.api.d/sssd-ipa.conf @@ -128,6 +128,7 @@ ldap_idmap_default_domain_sid = str, None, false ldap_groups_use_matching_rule_in_chain = bool, None, false ldap_initgroups_use_matching_rule_in_chain = bool, None, false ldap_rfc2307_fallback_to_local_users = bool, None, false +ipa_server_mode = bool, None, false [provider/ipa/auth] krb5_ccachedir = str, None, false |