diff options
| author | Lukas Slebodnik <lslebodn@redhat.com> | 2013-04-24 20:26:40 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-05-03 19:59:40 +0200 |
| commit | b24e4bec819b29f1ec8e77083d4e7610c5dd9c77 (patch) | |
| tree | 393b76738d8cd9cd4f5b463e37ff96421a839e74 /src/man | |
| parent | e3db994ddc8eda225c4cc3c90e9c0bd82281faf6 (diff) | |
| download | sssd-b24e4bec819b29f1ec8e77083d4e7610c5dd9c77.tar.gz sssd-b24e4bec819b29f1ec8e77083d4e7610c5dd9c77.tar.bz2 sssd-b24e4bec819b29f1ec8e77083d4e7610c5dd9c77.zip | |
SUDO: IPA provider
This patch added auto configuration SUDO with ipa provider and compat tree.
https://fedorahosted.org/sssd/ticket/1733
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/sssd-sudo.5.xml | 30 |
1 files changed, 3 insertions, 27 deletions
diff --git a/src/man/sssd-sudo.5.xml b/src/man/sssd-sudo.5.xml index fec81533..361fdb7b 100644 --- a/src/man/sssd-sudo.5.xml +++ b/src/man/sssd-sudo.5.xml @@ -89,33 +89,9 @@ ldap_sudo_search_base = ou=sudoers,dc=example,dc=com </programlisting> </para> <para> - The following example illustrates setting up SSSD to download - sudo rules from an IPA server. It is necessary to use the LDAP - provider and set appropriate connection parameters to authenticate - correctly against the IPA server, because SSSD does not have native - support of IPA provider for sudo yet. - </para> - <para> -<programlisting> -[sssd] -config_file_version = 2 -services = nss, pam, sudo -domains = EXAMPLE - -[domain/EXAMPLE] -id_provider = ipa -ipa_domain = example.com -ipa_server = ipa.example.com -ldap_tls_cacert = /etc/ipa/ca.crt - -sudo_provider = ldap -ldap_uri = ldap://ipa.example.com -ldap_sudo_search_base = ou=sudoers,dc=example,dc=com -ldap_sasl_mech = GSSAPI -ldap_sasl_authid = host/hostname.example.com -ldap_sasl_realm = EXAMPLE.COM -krb5_server = ipa.example.com -</programlisting> + When the SSSD is configured to use the IPA provider, the sudo + provider is automatically enabled. The sudo search base + is configured to use the compat tree (ou=sudoers,$DC). </para> </refsect1> |