summaryrefslogtreecommitdiff
path: root/src/man
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2010-12-22 11:00:22 -0500
committerStephen Gallagher <sgallagh@redhat.com>2010-12-22 13:22:28 -0500
commitc71ff1e4615ec8560b90ca7d4827d99424ad0355 (patch)
tree5f1ccd75d8e6dfcb9d5a3898ebc9368dabcca261 /src/man
parent7da6ae5558059218d660d879057f6e39864c3493 (diff)
downloadsssd-c71ff1e4615ec8560b90ca7d4827d99424ad0355.tar.gz
sssd-c71ff1e4615ec8560b90ca7d4827d99424ad0355.tar.bz2
sssd-c71ff1e4615ec8560b90ca7d4827d99424ad0355.zip
Update the ID cache for any PAM request
Also adds an option to limit how often we check the ID provider, so that conversations with multiple PAM requests won't update the cache multiple times. https://fedorahosted.org/sssd/ticket/749
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd.conf.5.xml22
1 files changed, 22 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index 7392dd09..96b7a4c3 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -440,6 +440,28 @@
</para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>pam_id_timeout (integer)</term>
+ <listitem>
+ <para>
+ For any PAM request while SSSD is online, the SSSD will
+ attempt to immediately update the cached identity
+ information for the user in order to ensure that
+ authentication takes place with the latest information.
+ </para>
+ <para>
+ A complete PAM conversation may perform multiple PAM
+ requests, such as account management and session
+ opening. This option controls (on a
+ per-client-application basis) how long (in seconds) we
+ can cache the identity information to avoid excessive
+ round-trips to the identity provider.
+ </para>
+ <para>
+ Default: 5
+ </para>
+ </listitem>
+ </varlistentry>
</variablelist>
</refsect2>
</refsect1>