summaryrefslogtreecommitdiff
path: root/src/config
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-06-17 09:32:07 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-06-28 22:22:20 +0200
commit0249e8d37920f59fd70bdafa4f6706a05ae523c1 (patch)
treeece7563cc8939b0c7948aa36812a52b70dbb06da /src/config
parent9822d4d468ec74e4e173f5adf0db12d02974cd18 (diff)
downloadsssd-0249e8d37920f59fd70bdafa4f6706a05ae523c1.tar.gz
sssd-0249e8d37920f59fd70bdafa4f6706a05ae523c1.tar.bz2
sssd-0249e8d37920f59fd70bdafa4f6706a05ae523c1.zip
IPA: Add a server mode option
https://fedorahosted.org/sssd/ticket/1993 SSSD needs to know that it is running on an IPA server and should not look up trusted users and groups with the help of the extdom plugin but do the lookups on its own. For this a new boolean configuration option, is introduced which defaults to false but is set to true during ipa-server-install or during updates of the FreeIPA server if it is not already set.
Diffstat (limited to 'src/config')
-rw-r--r--src/config/etc/sssd.api.d/sssd-ipa.conf1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/config/etc/sssd.api.d/sssd-ipa.conf b/src/config/etc/sssd.api.d/sssd-ipa.conf
index 8a7e75f2..bc14fbe3 100644
--- a/src/config/etc/sssd.api.d/sssd-ipa.conf
+++ b/src/config/etc/sssd.api.d/sssd-ipa.conf
@@ -128,6 +128,7 @@ ldap_idmap_default_domain_sid = str, None, false
ldap_groups_use_matching_rule_in_chain = bool, None, false
ldap_initgroups_use_matching_rule_in_chain = bool, None, false
ldap_rfc2307_fallback_to_local_users = bool, None, false
+ipa_server_mode = bool, None, false
[provider/ipa/auth]
krb5_ccachedir = str, None, false