summaryrefslogtreecommitdiff
path: root/src/man
diff options
context:
space:
mode:
authorPavel Březina <pbrezina@redhat.com>2012-01-24 13:42:59 +0100
committerStephen Gallagher <sgallagh@redhat.com>2012-02-04 08:27:16 -0500
commit41ef946f3f74a46b9e26118116e4811e259b30ef (patch)
treed88a5b7a94eaee2f2407c1ffa43ff3497d99c90b /src/man
parentbd92e8ee315d4da9350b9ef0358c88a7b54aeebe (diff)
downloadsssd-41ef946f3f74a46b9e26118116e4811e259b30ef.tar.gz
sssd-41ef946f3f74a46b9e26118116e4811e259b30ef.tar.bz2
sssd-41ef946f3f74a46b9e26118116e4811e259b30ef.zip
SUDO Integration - in-memory cache in responder
New sudo responder option: cache_timeout https://fedorahosted.org/sssd/ticket/1111
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd.conf.5.xml38
1 files changed, 38 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index 94fc591a..e8e8b334 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -594,6 +594,44 @@
</varlistentry>
</variablelist>
</refsect2>
+
+ <refsect2 id='SUDO' condition="with_sudo">
+ <title>SUDO configuration options</title>
+ <para>
+ These options can be used to configure the sudo service.
+ </para>
+ <para>
+ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/experimental.xml" />
+ </para>
+ <variablelist>
+ <varlistentry>
+ <term>sudo_cache_timeout (integer)</term>
+ <listitem>
+ <para>
+ For any sudo request that comes while SSSD is
+ online, the SSSD will attempt to update the cached
+ rules in order to ensure that sudo has the latest
+ ruleset.
+ </para>
+ <para>
+ The user may, however, run a couple of sudo commands
+ successively, which would trigger multiple LDAP requests.
+ In order to speed up this use-case, the sudo service
+ maintains an in-memory cache that would be used for
+ performing fast replies.
+ </para>
+ <para>
+ This option controls how long (in seconds) can the sudo
+ service cache rules for a user.
+ </para>
+ <para>
+ Default: 180
+ </para>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+ </refsect2>
+
</refsect1>
<refsect1 id='domain-sections'>