summaryrefslogtreecommitdiff
path: root/src/man
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2012-11-13 21:21:38 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-11-14 10:42:34 +0100
commit778491bebee536a196afc29b0d9953843a5374b2 (patch)
tree947d73e6623bad45ac9710753c8a2037b45c24a5 /src/man
parent032d0980dfe5a27a5954f44f9d519e03fc7d1ced (diff)
downloadsssd-778491bebee536a196afc29b0d9953843a5374b2.tar.gz
sssd-778491bebee536a196afc29b0d9953843a5374b2.tar.bz2
sssd-778491bebee536a196afc29b0d9953843a5374b2.zip
Always start PAC responder if IPA ID provider is configured
Since the PAC responder is used during the authentication of users from trusted realms it is started automatically if the IPA ID provider is configured for a domain to simplify the configuration. Fixes https://fedorahosted.org/sssd/ticket/1613
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd-ipa.5.xml6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index db6aecf8..da5a2ffb 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -58,6 +58,12 @@
refer to freeipa.org for more information about HBAC. No configuration
of access provider is required on the client side.
</para>
+ <para>
+ The IPA provider will use the PAC responder if the Kerberos tickets
+ of users from trusted realms contain a PAC. To make configuration
+ easier the PAC responder is started automatically if the IPA ID
+ provider is configured.
+ </para>
</refsect1>
<refsect1 id='file-format'>