summaryrefslogtreecommitdiff
path: root/src/man/sssd-ad.5.xml
AgeCommit message (Collapse)AuthorFilesLines
2013-09-27MAN: Document that POSIX attributes must be replicated to GCJakub Hrozek1-0/+5
Currently the AD provider relies on the presence of the POSIX attributes in the Global Catalog. This patch mentiones the fact in the sssd-ad(5) manual page.
2013-09-20MAN: Fix provider man page subtitleJakub Hrozek1-1/+1
2013-08-24MAN: AD provider only supports trusted domains from the same forestJakub Hrozek1-0/+5
Resolves: https://fedorahosted.org/sssd/ticket/2044
2013-07-17MAN: IP addresss does not work when used for ad_serverJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1998 Currently using IP address as value of ad_server is not supported, so the man pages should not mention that as an option.
2013-07-17MAN: clarify the default access provider for ADJakub Hrozek1-0/+5
https://fedorahosted.org/sssd/ticket/1965 After we added a section that clarified what access_provider=ad did, some users were confused and thought that "ad" was also the default access provider if "id_provider=ad" was specified.
2013-05-30MAN: state default dyndns interfaceOndrej Kos1-1/+4
https://fedorahosted.org/sssd/ticket/1924
2013-05-14man: Clarify the AD site discovery documentationJakub Hrozek1-1/+3
https://fedorahosted.org/sssd/ticket/1909
2013-05-13man: Clarify that AD dyndns updates are secured using GSS-TSIGJakub Hrozek1-1/+4
https://fedorahosted.org/sssd/ticket/1910
2013-05-13Enable the AD dynamic DNS updates by defaultJakub Hrozek1-1/+1
https://fedorahosted.org/sssd/ticket/1915
2013-05-13Fix a typo in sssd-ad man pageJakub Hrozek1-1/+1
s/IPA/AD/
2013-05-07AD: read flat name and SID of the AD domainSumit Bose1-0/+4
For various features either the flat/short/NetBIOS domain name or the domain SID is needed. Since the responders already try to do a subdomain lookup when and known domain name is encountered I added a subdomain lookup to the AD provider which currently only reads the SID from the base DN and the NetBIOS name from a reply of a LDAP ping. The results are written to the cache to have them available even if SSSD is started in offline mode. Looking up trusted domains can be added later. Since all the needed responder code is already available from the corresponding work for the IPA provider this patch fixes https://fedorahosted.org/sssd/ticket/1468
2013-05-03Active Directory dynamic DNS updatesJakub Hrozek1-0/+90
https://fedorahosted.org/sssd/ticket/1504 Implements dynamic DNS updates for the AD provider. By default, the updates also update the reverse zone and run periodically every 24 hours.
2013-05-02DNS sites support - add AD SRV pluginPavel Březina1-0/+21
https://fedorahosted.org/sssd/ticket/1032
2013-04-26Document that the AD provider is case-insensitiveJakub Hrozek1-0/+3
https://fedorahosted.org/sssd/ticket/1867
2013-04-22Allow usage of enterprise principalsSumit Bose1-0/+19
Enterprise principals are currently most useful for the AD provider and hence enabled here by default while for the other Kerberos based authentication providers they are disabled by default. If additional UPN suffixes are configured for the AD domain the user principal stored in the AD LDAP server might not contain the real Kerberos realm of the AD domain but one of the additional suffixes which might be completely randomly chooses, e.g. are not related to any existing DNS domain. This make it hard for a client to figure out the right KDC to send requests to. To get around this enterprise principals (see http://tools.ietf.org/html/rfc6806 for details) were introduced. Basically a default realm is added to the principal so that the Kerberos client libraries at least know where to send the request to. It is not in the responsibility of the KDC to either handle the request itself, return a client referral if he thinks a different KDC can handle the request or return and error. This feature is also use to allow authentication in AD environments with cross forest trusts. Fixes https://fedorahosted.org/sssd/ticket/1842
2013-04-10Put the override_homedir into an included xml fileJakub Hrozek1-87/+1
The description was duplicated on two places, leading to errors where one was amended but the other was not.
2013-03-21Document what does access_provider=ad doJakub Hrozek1-0/+14
https://fedorahosted.org/sssd/ticket/1841
2012-10-18Allow setting the default_shell option per-domain as wellJakub Hrozek1-1/+2
https://fedorahosted.org/sssd/ticket/1583
2012-08-03Fix various typos in documentation.Yuri Chornoivan1-1/+1
2012-08-01Primary server support: new option in AD providerJan Zeleny1-1/+1
This patch adds support for new config option ad_backup_server. The description of this option's functionality is included in man page in one of previous patches.
2012-07-20MAN: Improvements to the AD provider manpageStephen Gallagher1-0/+98
Add information about ID mapping (including how to disable it) as well as information on how to handle homedir and shell. https://fedorahosted.org/sssd/ticket/1433
2012-07-06AD: Add manpages and SSSDConfig entriesStephen Gallagher1-0/+155
generated by cgit (git 2.34.1) at 2024-06-01 07:34:37 +0000