sssd.git/src/man, branch nonroot

AD/IPA: add krb5_confd_path configuration option

2014-11-25T12:28:39+00:00

With this new parameter the directory where Kerberos configuration
snippets are created can be specified.

Fixes https://fedorahosted.org/sssd/ticket/2473

Reviewed-by: Jakub Hrozek

Man: debug_timestamps and debug_microseconds

2014-11-20T10:32:25+00:00

Add note that these two options are ignored if
journald is used.

https://fedorahosted.org/sssd/ticket/2498

Reviewed-by: Jakub Hrozek

MAN: Update case_sensitive=Preserving in man pages.

2014-11-20T10:24:47+00:00

https://fedorahosted.org/sssd/ticket/2462

MAN: page edit for ldap_use_tokengroups

2014-11-19T22:39:43+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2448

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

LDAP: Disable token groups by default

2014-11-12T16:48:14+00:00

We tried to speed up processing of initgroup lookups with tokenGroups even for
the LDAP provider (if remote server is Active Directory), but it turns out that
there are too many corner cases that we didn't catch during development that
break. For instance, groups from other trusted domains might appear in TG and
the LDAP provider isn't equipped to handle them.

Overall, users who wish to use the added speed benefits of tokenGroups are
advised to use the AD provider.

Resolves:
https://fedorahosted.org/sssd/ticket/2483

Reviewed-by: Michal Židek

Revert "LDAP: Change defaults for ldap_user/group_objectsid"

2014-11-10T09:38:53+00:00

This reverts commit f834f712548db811695ea0fd6d6b31d3bd03e2a3.

OpenLDAP server cannot dereference unknown attributes. The attribute objectSID
isn't in any standard objectclass on OpenLDAP server. This is a reason why
objectSID cannot be set by default in rfc2307 map and rfc2307bis map.
It is the same problem as using non standard attribute "nsUniqueId"
in ticket https://fedorahosted.org/sssd/ticket/2383

Reviewed-by: Michal Židek

Fix uuid defaults

2014-11-06T18:25:18+00:00

Recently the uuid attributes for user and groups were removed because
it was found that there are not used at all and that some of them where
causing issues (https://fedorahosted.org/sssd/ticket/2383).

The new views/overrides feature of FreeIPA uses the ipaUniqueID attribute
to relate overrides with the original IPA objects. The previous two
patches revert the removal of the uuid attributes from users and groups
with this patch set the default value of these attributes to
ipaUniqueID from the IPA provider, to objectGUID for the AD provider and
leaves them unset for the general LDAP case to avoid issues like the one
from ticket #2383.

Related to https://fedorahosted.org/sssd/ticket/2481

Reviewed-by: Lukáš Slebodník

Revert "LDAP: Remove unused option ldap_group_uuid"

2014-11-06T18:25:16+00:00

This reverts commit b5242c146cc0ca96e2b898a74fb060efda15bc77.

Reviewed-by: Lukáš Slebodník

Revert "LDAP: Remove unused option ldap_user_uuid"

2014-11-06T18:25:09+00:00

This reverts commit dfb2960ab251f609466fa660449703835c97f99a.

Reviewed-by: Lukáš Slebodník

Views: apply user SSH public key override

2014-11-05T14:26:36+00:00

With this patch the SSH public key override attribute is read from the
FreeIPA server and saved in the cache with the other override data.

Since it is possible to have multiple public SSH keys this override
value does not replace any other data but will be added to existing
values.

Fixes https://fedorahosted.org/sssd/ticket/2454

Reviewed-by: Jakub Hrozek