diff options
| author | Pavel Reichl <preichl@redhat.com> | 2014-09-25 14:52:31 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-09-29 18:27:07 +0200 |
| commit | 830ded27453015080a54d6ba85fd4999ee7e9af1 (patch) | |
| tree | 2dcdecd4d211c25e7e1dd909e062e534348227db /src/confdb | |
| parent | cb7644495e76ffa3e19ba10efb4a0f5f3817ba33 (diff) | |
| download | sssd-830ded27453015080a54d6ba85fd4999ee7e9af1.tar.gz sssd-830ded27453015080a54d6ba85fd4999ee7e9af1.tar.xz sssd-830ded27453015080a54d6ba85fd4999ee7e9af1.zip | |
PAM: new options pam_trusted_users & pam_public_domains
pam_public_domains option is a list of numerical UIDs or user names
that are trusted.
pam_public_domains option is a list of domains accessible even for
untrusted users.
Based on:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Diffstat (limited to 'src/confdb')
| -rw-r--r-- | src/confdb/confdb.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/confdb/confdb.h b/src/confdb/confdb.h index 1697c69f0..720b7dc1c 100644 --- a/src/confdb/confdb.h +++ b/src/confdb/confdb.h @@ -111,6 +111,8 @@ #define CONFDB_PAM_VERBOSITY "pam_verbosity" #define CONFDB_PAM_ID_TIMEOUT "pam_id_timeout" #define CONFDB_PAM_PWD_EXPIRATION_WARNING "pam_pwd_expiration_warning" +#define CONFDB_PAM_TRUSTED_USERS "pam_trusted_users" +#define CONFDB_PAM_PUBLIC_DOMAINS "pam_public_domains" /* SUDO */ #define CONFDB_SUDO_CONF_ENTRY "config/sudo" |