diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2013-07-31 14:31:50 +0300 |
|---|---|---|
| committer | Nalin Dahyabhai <nalin@dahyabhai.net> | 2013-08-07 11:33:34 -0400 |
| commit | 87fcea3db1d716a9e0cd8e86c038d44342bd2b27 (patch) | |
| tree | 6252e76991afb739ba6b2ba8428c586cbfa871f2 /src | |
| parent | 4ddd2079b059c57f09419c72f73efee468318b01 (diff) | |
| download | slapi-nis-87fcea3db1d716a9e0cd8e86c038d44342bd2b27.tar.gz slapi-nis-87fcea3db1d716a9e0cd8e86c038d44342bd2b27.tar.xz slapi-nis-87fcea3db1d716a9e0cd8e86c038d44342bd2b27.zip | |
configure: add configure checks for sss_idmap and define attribute to lookup nsswitch
If schema compat plugin configuration has
'schema-compat-lookup-nsswitch: user|group' then schema compat plugin
will perform lookups of users/groups that were not found in the main
store using getpwnam_r()/getgrnam_r() and libsss_nss_idmap library.
This is special case to support legacy clients. Schema compat plugin in
the case is assumed to be running on FreeIPA master configured with
trusts against Active Directory and SSSD 1.11+ configured as
ipa_server_mode = True.
Additionally, such entries are added to schema compat plugin's map cache
and can be used for authentication purposes. They will use PAM
authentication pass-through to 'system-auth' service.
Diffstat (limited to 'src')
0 files changed, 0 insertions, 0 deletions