summaryrefslogtreecommitdiff
path: root/src/man/sssd-ldap.5.xml
AgeCommit message (Collapse)AuthorFilesLines
2012-04-18Fix erronous reference to the 'allow' access_providerStef Walter1-1/+1
* Should be 'permit' instead https://fedorahosted.org/sssd/ticket/1295 Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2012-04-18MAN: Add ldap_sasl_minssf to the manpageStephen Gallagher1-0/+16
2012-04-18MAN: Improve ldap_disable_paging documentationStephen Gallagher1-1/+4
2012-04-18man: document that referral chasing might bring performance penaltyJakub Hrozek1-0/+8
https://fedorahosted.org/sssd/ticket/1265
2012-03-14LDAP: Add AD 2008r2 schemaStephen Gallagher1-1/+4
https://fedorahosted.org/sssd/ticket/1031
2012-02-07fix typos in manualYuri Chornoivan1-1/+1
2012-02-07Two sssd-ldap manual pages fixesJakub Hrozek1-4/+4
Reported by Marco Pizzoli
2012-02-07LDAP: Add support for SSH user public keysJan Cholasta1-0/+10
2012-02-06Update shadowLastChanged attribute during LDAP password changeJan Zeleny1-2/+0
https://fedorahosted.org/sssd/ticket/1019
2012-02-05AUTOFS: LDAP providerJakub Hrozek1-0/+101
2012-01-31LDAP: Add new options for service mapsStephen Gallagher1-0/+70
Adds the new service map options to the SSSDConfig API and the manpages.
2012-01-30Include sudo manual pages only conditionallyJakub Hrozek1-6/+25
2012-01-30SUDO Integration - manual pagePavel Březina1-0/+188
https://fedorahosted.org/sssd/ticket/1109
2012-01-18LDAP: Add option to disable paging controlStephen Gallagher1-0/+24
Fixes https://fedorahosted.org/sssd/ticket/967
2011-12-14Support search bases in RFC2307bis enumerationPavel Březina1-0/+7
https://fedorahosted.org/sssd/ticket/960
2011-12-12Add sdap_connection_expire_timeout optionStephen Gallagher1-0/+17
https://fedorahosted.org/sssd/ticket/1036
2011-11-23Added and modified options for IPA netgroupsJan Zeleny1-0/+22
2011-11-10Fix typos in manual pagesYuri Chornoivan1-1/+1
2011-11-02Support to request canonicalization in LDAP/IPA providerJan Zeleny1-0/+15
https://fedorahosted.org/sssd/ticket/957
2011-11-02LDAP: Update manpages with multiple search base informationStephen Gallagher1-1/+56
2011-10-13man page fix (lists are comma-separated)Jan Zeleny1-2/+2
https://fedorahosted.org/sssd/ticket/1024
2011-09-06Allow turning dereference off by setting the threshold to 0Jakub Hrozek1-0/+4
2011-08-26Add LDAP provider option to set LDAP_OPT_X_SASL_NOCANONJakub Hrozek1-0/+14
https://fedorahosted.org/sssd/ticket/978
2011-07-08Add LDAP access control based on NDS attributesSumit Bose1-0/+50
2011-05-31Changing default to Default for consistencyKaushik Banerjee1-1/+1
2011-05-27Add more detail to ldap_uri manpage entryStephen Gallagher1-1/+13
2011-05-24Make "password" the default for ldap_default_authtok_typeStephen Gallagher1-0/+3
2011-05-20Use dereference when processing RFC2307bis nested groupsJakub Hrozek1-0/+23
Instead of issuing N LDAP requests when processing a group with N users, utilize the dereference functionality to pull down all the members in a single LDAP request. https://fedorahosted.org/sssd/ticket/799
2011-04-27Add ldap_page_size configuration optionStephen Gallagher1-0/+14
2011-04-19Add user and group search LDAP filter optionsJakub Hrozek1-0/+37
https://fedorahosted.org/sssd/ticket/647
2011-03-24Add host access control supportPierre Ossman1-0/+24
https://fedorahosted.org/sssd/ticket/746
2011-01-20Add ldap_tls_{cert,key,cipher_suite} config optionsTyson Whitehead1-0/+41
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2011-01-19Add LDAP expire policy base RHDS/IPA attributeSumit Bose1-0/+20
The attribute nsAccountLock is used by RHDS, IPA and other directory servers to indicate that the account is locked.
2011-01-19Add LDAP expire policy based on AD attributesSumit Bose1-0/+35
The second bit of userAccountControl is used to determine if the account is enabled or disabled. accountExpires is checked to see if the account is expired.
2011-01-17Add ldap_search_enumeration_timeout config optionSumit Bose1-5/+23
2010-12-21Add authorizedService supportStephen Gallagher1-0/+26
https://fedorahosted.org/sssd/ticket/670
2010-12-07Replace krb5_kdcip by krb5_server in LDAP providerSumit Bose1-1/+7
2010-12-06Add ldap_chpass_uri config optionSumit Bose1-0/+34
2010-12-06Add new account expired rule to LDAP access providerSumit Bose1-1/+54
Two new options are added to the LDAP access provider to allow a broader range of access control rules to be evaluated. 'ldap_access_order' makes it possible to run more than one rule. To keep compatibility with older versions the default is 'filter'. This patch adds a new rule 'expire'. 'ldap_account_expire_policy' specifies which LDAP attribute should be used to determine if an account is expired or not. Currently only 'shadow' is supported which evaluates the ldap_user_shadow_expire attribute.
2010-12-01Allow protocol fallback for SRV queriesJakub Hrozek1-0/+5
https://fedorahosted.org/sssd/ticket/691
2010-11-19Fix man pageSumit Bose1-2/+2
Currently sssd does not support authentication via GSSAPI. I think it is not necessary to support it, because if GSSAPI is possible Kerberos should be use for authentication.
2010-11-15Properly document ldap_purge_cache_timeoutStephen Gallagher1-0/+19
Also allow it to be disabled entirely
2010-11-05Review comments for namingContexts patchesSumit Bose1-9/+3
2010-11-04Make ldap_search_base a non-mandatory optionSumit Bose1-3/+20
2010-10-22Add ldap_deref optionSumit Bose1-0/+35
2010-10-18Move all references to ldap_<entity>_search_base to "advanced" sectionJan Zeleny1-42/+52
The <entity> can be one of user, group or netgroup. The references were removed from example configuration and they were moved from section Configuration options to section Advanced options. Ticket: #607
2010-10-18Add option to limit nested groupsSimo Sorce1-0/+16
2010-10-13Add infrastructure to LDAP provider for netgroup supportSumit Bose1-0/+91
2010-10-13Add KDC to the list of LDAP optionsJakub Hrozek1-0/+18
2010-10-13Man pages should mention supported providersJan Zeleny1-5/+7
Each back end can support id, auth or access provider, but each back end supports different subset of these. Man pages should describe which providers are supported by each back end. Ticket: #615
generated by cgit (git 2.34.1) at 2024-07-09 12:02:34 +0000