summaryrefslogtreecommitdiff
path: root/src/man
diff options
context:
space:
mode:
authorLukas Slebodnik <lslebodn@redhat.com>2013-04-24 20:26:40 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-05-03 19:59:40 +0200
commitb24e4bec819b29f1ec8e77083d4e7610c5dd9c77 (patch)
tree393b76738d8cd9cd4f5b463e37ff96421a839e74 /src/man
parente3db994ddc8eda225c4cc3c90e9c0bd82281faf6 (diff)
downloadsssd-b24e4bec819b29f1ec8e77083d4e7610c5dd9c77.tar.gz
sssd-b24e4bec819b29f1ec8e77083d4e7610c5dd9c77.tar.bz2
sssd-b24e4bec819b29f1ec8e77083d4e7610c5dd9c77.zip
SUDO: IPA provider
This patch added auto configuration SUDO with ipa provider and compat tree. https://fedorahosted.org/sssd/ticket/1733
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd-sudo.5.xml30
1 files changed, 3 insertions, 27 deletions
diff --git a/src/man/sssd-sudo.5.xml b/src/man/sssd-sudo.5.xml
index fec81533..361fdb7b 100644
--- a/src/man/sssd-sudo.5.xml
+++ b/src/man/sssd-sudo.5.xml
@@ -89,33 +89,9 @@ ldap_sudo_search_base = ou=sudoers,dc=example,dc=com
</programlisting>
</para>
<para>
- The following example illustrates setting up SSSD to download
- sudo rules from an IPA server. It is necessary to use the LDAP
- provider and set appropriate connection parameters to authenticate
- correctly against the IPA server, because SSSD does not have native
- support of IPA provider for sudo yet.
- </para>
- <para>
-<programlisting>
-[sssd]
-config_file_version = 2
-services = nss, pam, sudo
-domains = EXAMPLE
-
-[domain/EXAMPLE]
-id_provider = ipa
-ipa_domain = example.com
-ipa_server = ipa.example.com
-ldap_tls_cacert = /etc/ipa/ca.crt
-
-sudo_provider = ldap
-ldap_uri = ldap://ipa.example.com
-ldap_sudo_search_base = ou=sudoers,dc=example,dc=com
-ldap_sasl_mech = GSSAPI
-ldap_sasl_authid = host/hostname.example.com
-ldap_sasl_realm = EXAMPLE.COM
-krb5_server = ipa.example.com
-</programlisting>
+ When the SSSD is configured to use the IPA provider, the sudo
+ provider is automatically enabled. The sudo search base
+ is configured to use the compat tree (ou=sudoers,$DC).
</para>
</refsect1>