summaryrefslogtreecommitdiff
path: root/src/man/sssd-ipa.5.xml
AgeCommit message (Collapse)AuthorFilesLines
2012-11-14Run IPA subdomain provider if IPA ID provider is configuredSumit Bose1-0/+23
To make configuration easier the IPA subdomain provider should be always loaded if the IPA ID provider is configured and the subdomain provider is not explicitly disabled. But to avoid the overhead of regular subdomain requests in setups where no subdomains are used the IPA subdomain provider should behave differently if configured explicit or implicit. If the IPA subdomain provider is configured explicitly, i.e. 'subdomains_provider = ipa' can be found in the domain section of sssd.conf subdomain request are always send to the server if needed. If it is configured implicitly and a request to the server fails with an indication that the server currently does not support subdomains at all, e.g. is not configured to handle trust relationships, a new request will be only send to the server after a long timeout or after a going-online event. To be able to make this distinction this patch save the configuration status to the subdomain context. Fixes https://fedorahosted.org/sssd/ticket/1613
2012-11-14Always start PAC responder if IPA ID provider is configuredSumit Bose1-0/+6
Since the PAC responder is used during the authentication of users from trusted realms it is started automatically if the IPA ID provider is configured for a domain to simplify the configuration. Fixes https://fedorahosted.org/sssd/ticket/1613
2012-10-16Make TTL configurable for dynamic dns updatesJames Hogarth1-0/+14
2012-10-05man: Note that automounter must be restarted to re-read the master mapJakub Hrozek1-0/+1
https://fedorahosted.org/sssd/ticket/1563
2012-08-03Fix various typos in documentation.Yuri Chornoivan1-1/+1
2012-08-01Primary server support: new option in IPA providerJan Zeleny1-1/+1
This patch adds support for new config option ipa_backup_server. The description of this option's functionality is included in man page in one of previous patches.
2012-07-06MAN: Unify "SEE ALSO" sectionsStephen Gallagher1-17/+2
2012-06-10IPA subdomains - ask for information about master domainJan Zeleny1-0/+19
The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain.
2012-04-24IPA: Add get-domains targetSumit Bose1-0/+19
2012-02-07AUTOFS: IPA providerJakub Hrozek1-0/+12
2012-02-07IPA: Add host info handlerJan Cholasta1-0/+12
2012-02-06Man pages for the session target and SELinux user maps fetchingJan Zeleny1-0/+140
2012-01-17IPA: Detect nsupdate support for the realm directiveStephen Gallagher1-0/+5
For older platforms, do not add the 'realm' line in the update message
2012-01-14Add info about ipa_host_search_base to man pageJan Zeleny1-0/+29
Also add comment that setting ipa_hbac_support_srchost to False disables search filters given in ipa_host_search_base
2011-11-29Add ipa_hbac_support_srchost option to IPA providerJan Zeleny1-0/+12
don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
2011-11-23Added and modified options for IPA netgroupsJan Zeleny1-1/+88
2011-11-10Fix typos in manual pagesYuri Chornoivan1-1/+1
2011-11-02Add support to request canonicalization on krb AS requestsJan Zeleny1-0/+17
https://fedorahosted.org/sssd/ticket/957
2011-10-13man page fix (lists are comma-separated)Jan Zeleny1-1/+1
https://fedorahosted.org/sssd/ticket/1024
2011-07-08Add ipa_hbac_treat_deny_as optionStephen Gallagher1-0/+27
By default, we will treat the presence of any DENY rule as denying all users. This option will allow the admin to explicitly ignore DENY rules during a transitional period.
2011-07-08Add ipa_hbac_refresh optionStephen Gallagher1-0/+15
This option describes the time between refreshes of the HBAC rules on the IPA server.
2011-02-28Use realm for basedn instead of IPA domainJakub Hrozek1-0/+15
https://fedorahosted.org/sssd/ticket/807
2011-01-19Add ipa_hbac_search_base config optionSumit Bose1-0/+13
2010-10-13Man pages should mention supported providersJan Zeleny1-0/+4
Each back end can support id, auth or access provider, but each back end supports different subset of these. Man pages should describe which providers are supported by each back end. Ticket: #615
2010-05-16Add dynamic DNS updates to FreeIPAStephen Gallagher1-0/+28
This adds two new options: ipa_dyndns_update: Boolean value to select whether this client should automatically update its IP address in FreeIPA DNS. ipa_dyndns_iface: Choose an interface manually to use for updating dynamic DNS. Default is to use the interface associated with the LDAP connection to FreeIPA. This patch supports A and AAAA records. It relies on the presence of the nsupdate tool from the bind-utils package to perform the actual update step. The location of this utility is set at build time, but its availability is determined at runtime (so clients that do not require dynamic update capability do not need to meet this dependency).
2010-05-07Revert "Add dynamic DNS updates to FreeIPA"Stephen Gallagher1-28/+0
This reverts commit 973b7c27c0b294b8b2f120296f64c6a3a36e44b7. While this patch applied cleanly, it was uncompilable. Reverting until it can be properly merged.
2010-05-07Add dynamic DNS updates to FreeIPAStephen Gallagher1-0/+28
This adds two new options: ipa_dyndns_update: Boolean value to select whether this client should automatically update its IP address in FreeIPA DNS. ipa_dyndns_iface: Choose an interface manually to use for updating dynamic DNS. Default is to use the interface associated with the LDAP connection to FreeIPA. This patch supports A and AAAA records. It relies on the presence of the nsupdate tool from the bind-utils package to perform the actual update step. The location of this utility is set at build time, but its availability is determined at runtime (so clients that do not require dynamic update capability do not need to meet this dependency).
2010-05-07Use service discovery in backendsJakub Hrozek1-0/+4
Integrate the failover improvements with our back ends. The DNS domain used in the SRV query is always the SSSD domain name. Please note that this patch changes the default value of ldap_uri from "ldap://localhost" to "NULL" in order to use service discovery with no server set.
2010-02-18Rename server/ directory to src/Stephen Gallagher1-0/+159
Also update BUILD.txt
generated by cgit (git 2.34.1) at 2024-11-23 18:32:37 +0000