|
src/back-sch-sssd.c implements interface to query trusted domain users
and groups on FreeIPA master server via getpwnam_r(), getgrnam_r(),
and libsss_idmap.
src/back-sch-pam.c implements PAM authentication for trusted domain users
using system-auth system service when running on FreeIPA master server.
Schema-compat plugin can be configured to serve trusted domain users
and groups through the plugin configuration entry in directory server:
schema-compat-lookup-sssd: <user|group>
schema-compat-sssd-min-id: <value>
Separate trees should be configured to look up users and groups.
If minimal id value is missing, it will be by default set to 1000.
|