summaryrefslogtreecommitdiff
path: root/src/man
diff options
context:
space:
mode:
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd-ipa.5.xml23
-rw-r--r--src/man/sssd.conf.5.xml14
2 files changed, 32 insertions, 5 deletions
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index da5a2ffb..56220c3e 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -595,6 +595,29 @@
</para>
</refsect1>
+ <refsect1 id='subdomains_provider'>
+ <title>SUBDOMAINS PROVIDER</title>
+ <para>
+ The IPA subdomains provider behaves slightly differently
+ if it is configured explicitly or implicitly.
+ </para>
+ <para>
+ If the option 'subdomains_provider = ipa' is found in the
+ domain section of sssd.conf, the IPA subdomains provider is
+ configured explicitly, and all subdomain requests are sent to the
+ IPA server if necessary.
+ </para>
+ <para>
+ If the option 'subdomains_provider' is not set in the domain
+ section of sssd.conf but there is the option 'id_provider = ipa',
+ the IPA subdomains provider is configured implictly. In this case,
+ if a subdomain request fails and indicates that the server does not
+ support subdomains, i.e. is not configured for trusts, the IPA
+ subdomains provider is disabled. After an hour or after the IPA
+ provider goes online, the subdomains provider is enabled again.
+ </para>
+ </refsect1>
+
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/failover.xml" />
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/service_discovery.xml" />
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index 33d99c75..9f487faf 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -1411,8 +1411,9 @@ override_homedir = /home/%u
<term>subdomains_provider (string)</term>
<listitem>
<para>
- The provider which should handle fetching of subdomains.
- This value should be always the same as id_provider.
+ The provider which should handle fetching of
+ subdomains. This value should be always the same as
+ id_provider.
Supported subdomain providers are:
</para>
<para>
@@ -1421,13 +1422,16 @@ override_homedir = /home/%u
<citerefentry>
<refentrytitle>sssd-ipa</refentrytitle>
<manvolnum>5</manvolnum>
- </citerefentry> for more information on configuring IPA.
+ </citerefentry> for more information on configuring
+ IPA.
</para>
<para>
- <quote>none</quote> disallows fetching subdomains explicitly.
+ <quote>none</quote> disallows fetching subdomains
+ explicitly.
</para>
<para>
- Default: none
+ Default: The value of <quote>id_provider</quote> is
+ used if it is set.
</para>
</listitem>
</varlistentry>