From ce0111fe4f1c5ea09a23c2be43fc1fcc1cdbdac8 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Mon, 24 Aug 2009 15:17:37 +0200
Subject: some UPN handling fixes

- making the realm part upper case is now optional and done in the
  LDAP backend
- using a username@realm UPN is now optional
---
 server/man/sssd-krb5.5.xml | 14 ++++++++++++++
 server/man/sssd-ldap.5.xml | 16 ++++++++++++++++
 2 files changed, 30 insertions(+)

(limited to 'server/man')

diff --git a/server/man/sssd-krb5.5.xml b/server/man/sssd-krb5.5.xml
index d2b631ab..3a22afcd 100644
--- a/server/man/sssd-krb5.5.xml
+++ b/server/man/sssd-krb5.5.xml
@@ -62,6 +62,20 @@
                         </para>
                     </listitem>
                 </varlistentry>
+
+                <varlistentry>
+                    <term>krb5try_simple_upn (boolean)</term>
+                    <listitem>
+                        <para>
+                            Set this option to 'true'
+                            if an User Principle Name (UPN) cannot be found in sysdb
+                            and you want to use an UPN like 'username@realm'.
+                        </para>
+                        <para>
+                            Default: false
+                        </para>
+                    </listitem>
+                </varlistentry>
             </variablelist>
         </para>
     </refsect1>
diff --git a/server/man/sssd-ldap.5.xml b/server/man/sssd-ldap.5.xml
index 948b3e29..aa33c713 100644
--- a/server/man/sssd-ldap.5.xml
+++ b/server/man/sssd-ldap.5.xml
@@ -218,6 +218,22 @@
                     </listitem>
                 </varlistentry>
 
+                <varlistentry>
+                    <term>force_upper_case_realm (boolean)</term>
+                    <listitem>
+                        <para>
+                            Some directory servers, for example Active Directory,
+                            might deliver the realm part of the UPN lower case
+                            which may cause the authentication to fail. Set this
+                            option to a non-zero value, if you want to use an
+                            upper case realm.
+                        </para>
+                        <para>
+                            Default: false
+                        </para>
+                    </listitem>
+                </varlistentry>
+
                 <varlistentry>
                     <term>userFullname (string)</term>
                     <listitem>
-- 
cgit