From 81009a08d43a6b5e60afb681c4ed07b413967179 Mon Sep 17 00:00:00 2001
From: Simo Sorce <ssorce@redhat.com>
Date: Wed, 28 Oct 2009 17:02:45 -0400
Subject: Tidy up ipa options

Do not replicate every and each option we may want to set in ipa.
Just read out ldap and krb provider options (added reference in the manual too,
and removed mention of ipa specific timeout values, use ldap options for that)

Avoid calling auth module initialization twice, just pass the auth context to
the chpass module too.

Add a new ldap option SDAP_SEARCH_BASE, so that a single searching base can be
used for both users and groups. the user and group search bases can still be set
separately if necessary but they are now optional and set to be identical to
SDAP_SEARCH_BASE if not explicitly specified in the configuration.
---
 server/man/sssd-ipa.5.xml | 81 +++++++++++------------------------------------
 1 file changed, 18 insertions(+), 63 deletions(-)

(limited to 'server/man/sssd-ipa.5.xml')

diff --git a/server/man/sssd-ipa.5.xml b/server/man/sssd-ipa.5.xml
index c5c96d11..31ce824a 100644
--- a/server/man/sssd-ipa.5.xml
+++ b/server/man/sssd-ipa.5.xml
@@ -39,7 +39,18 @@
             and configuration is almost entirely self discovered and obtained
             directly from the server.
         </para>
-
+        <para>
+            The IPA provider also accepts the same options used by the
+            <citerefentry>
+                <refentrytitle>sssd-ldap</refentrytitle>
+                <manvolnum>5</manvolnum>
+            </citerefentry> identity provider and the
+            <citerefentry>
+                <refentrytitle>sssd-krb5</refentrytitle>
+                <manvolnum>5</manvolnum>
+            </citerefentry> authentication provider.
+            But it is not recommended to set these options and it is not necessary.
+        </para>
     </refsect1>
 
     <refsect1 id='file-format'>
@@ -83,68 +94,6 @@
                     </listitem>
                 </varlistentry>
 
-                <varlistentry>
-                    <term>krb5_ccachedir (string)</term>
-                    <listitem>
-                        <para>
-                            Directory to store credential caches.
-                        </para>
-                        <para>
-                            Default: /tmp
-                        </para>
-                    </listitem>
-                </varlistentry>
-
-                <varlistentry>
-                    <term>ipa_search_timeout (integer)</term>
-                    <listitem>
-                        <para>
-                            Specifies the timeout (in seconds) after which
-                            a search against the ipa server is forcibly
-                            terminated.
-                        </para>
-                        <para>
-                            Default: 60
-                        </para>
-                    </listitem>
-                </varlistentry>
-
-                <varlistentry>
-                    <term>ipa_network_timeout (integer)</term>
-                    <listitem>
-                        <para>
-                            Specifies the timeout (in seconds) after which
-                            the
-                            <citerefentry>
-                                <refentrytitle>poll</refentrytitle>
-                                <manvolnum>2</manvolnum>
-                            </citerefentry>/<citerefentry>
-                                <refentrytitle>select</refentrytitle>
-                                <manvolnum>2</manvolnum>
-                            </citerefentry>
-                            following a non-search operation against the ipa
-                            server is forcibly terminated.
-                        </para>
-                        <para>
-                            Default: 6
-                        </para>
-                    </listitem>
-                </varlistentry>
-
-                <varlistentry>
-                    <term>ipa_offline_timeout (integer)</term>
-                    <listitem>
-                        <para>
-                            Specifies the "black-out" time before any new
-                            network operation is attempted after the ipa
-                            provider has turned into offline operation mode.
-                        </para>
-                        <para>
-                            Default: 60
-                        </para>
-                    </listitem>
-                </varlistentry>
-
             </variablelist>
         </para>
     </refsect1>
@@ -173,6 +122,12 @@
             <citerefentry>
                 <refentrytitle>sssd.conf</refentrytitle><manvolnum>5</manvolnum>
             </citerefentry>,
+            <citerefentry>
+                <refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum>
+            </citerefentry>,
+            <citerefentry>
+                <refentrytitle>sssd-krb5</refentrytitle><manvolnum>5</manvolnum>
+            </citerefentry>,
             <citerefentry>
                 <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum>
             </citerefentry>
-- 
cgit