diff options
| author | Sumit Bose <sbose@redhat.com> | 2014-02-28 10:05:34 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-03-02 21:17:59 +0100 |
| commit | 77cb1c56f13a41d1920efb2946db10a00ed63c9c (patch) | |
| tree | 80d711d902538acc89f31444d3c90d496204ed1f /src/config/etc/sssd.api.d/sssd-ad.conf | |
| parent | 056402b9937e43054a3b5780fe9eff2aa9ef84ef (diff) | |
| download | sssd-77cb1c56f13a41d1920efb2946db10a00ed63c9c.tar.gz sssd-77cb1c56f13a41d1920efb2946db10a00ed63c9c.tar.xz sssd-77cb1c56f13a41d1920efb2946db10a00ed63c9c.zip | |
SUDO: AD provider
This patch adds the sudo target to the AD provider. The main reason is
to cover different default settings in the LDAP and AD provider. E.g.
the default for ldap_id_mapping is True in the AD provider and False
in the LDAP provider. If ldap_id_mapping was not set explicitly in the
config file both components worked with different setting.
Fixes https://fedorahosted.org/sssd/ticket/2256
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 61804568ce5ede3b1a699cda17c033dd6c23f0e3)
Diffstat (limited to 'src/config/etc/sssd.api.d/sssd-ad.conf')
| -rw-r--r-- | src/config/etc/sssd.api.d/sssd-ad.conf | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/src/config/etc/sssd.api.d/sssd-ad.conf b/src/config/etc/sssd.api.d/sssd-ad.conf index 6b136f2ec..aa20ca0bb 100644 --- a/src/config/etc/sssd.api.d/sssd-ad.conf +++ b/src/config/etc/sssd.api.d/sssd-ad.conf @@ -132,3 +132,24 @@ krb5_kpasswd = str, None, false krb5_backup_kpasswd = str, None, false [provider/ad/subdomains] + +[provider/ad/sudo] +ldap_sudo_search_base = str, None, false +ldap_sudo_full_refresh_interval = int, None, false +ldap_sudo_smart_refresh_interval = int, None, false +ldap_sudo_use_host_filter = bool, None, false +ldap_sudo_hostnames = str, None, false +ldap_sudo_ip = str, None, false +ldap_sudo_include_netgroups = bool, None, false +ldap_sudo_include_regexp = bool, None, false +ldap_sudorule_object_class = str, None, false +ldap_sudorule_name = str, None, false +ldap_sudorule_command = str, None, false +ldap_sudorule_host = str, None, false +ldap_sudorule_user = str, None, false +ldap_sudorule_option = str, None, false +ldap_sudorule_runasuser = str, None, false +ldap_sudorule_runasgroup = str, None, false +ldap_sudorule_notbefore = str, None, false +ldap_sudorule_notafter = str, None, false +ldap_sudorule_order = str, None, false |