diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2011-01-25 10:47:25 -0500 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-01-27 12:24:16 -0500 |
| commit | a1af9beb915e96da634b7d17762bf42146104d45 (patch) | |
| tree | cfef68f15b3b7c69a82538c63671c90f08e079c6 /src/providers/ipa/ipa_common.c | |
| parent | aa89df2040593f9120196ec440d2dc6d9f860d55 (diff) | |
| download | sssd-a1af9beb915e96da634b7d17762bf42146104d45.tar.gz sssd-a1af9beb915e96da634b7d17762bf42146104d45.tar.bz2 sssd-a1af9beb915e96da634b7d17762bf42146104d45.zip | |
Add option to disable TLS for LDAP auth
Option is named to discourage use in production environments and
is intentionally not listed in the SSSDConfig API.
Diffstat (limited to 'src/providers/ipa/ipa_common.c')
| -rw-r--r-- | src/providers/ipa/ipa_common.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c index b3467c60..401c1930 100644 --- a/src/providers/ipa/ipa_common.c +++ b/src/providers/ipa/ipa_common.c @@ -86,7 +86,11 @@ struct dp_option ipa_def_ldap_opts[] = { { "ldap_access_order", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_chpass_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_chpass_dns_service_name", DP_OPT_STRING, NULL_STRING, NULL_STRING }, - { "ldap_enumeration_search_timeout", DP_OPT_NUMBER, { .number = 60 }, NULL_NUMBER } + { "ldap_enumeration_search_timeout", DP_OPT_NUMBER, { .number = 60 }, NULL_NUMBER }, + /* Do not include ldap_auth_disable_tls_never_use_in_production in the + * manpages or SSSDConfig API + */ + { "ldap_auth_disable_tls_never_use_in_production", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE } }; struct sdap_attr_map ipa_attr_map[] = { |