summaryrefslogtreecommitdiffstats
path: root/src/config
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2010-10-27 13:34:54 +0200
committerStephen Gallagher <sgallagh@redhat.com>2010-11-15 15:37:30 -0500
commit9468a58f9bd191ef80c114943a288037c635a835 (patch)
tree61d7209ebaea50aadc1b90ad7880a83579d6d254 /src/config
parent4b498111c49b254e9aa5e2b0d4fcc1ba24a04236 (diff)
downloadsssd-9468a58f9bd191ef80c114943a288037c635a835.tar.gz
sssd-9468a58f9bd191ef80c114943a288037c635a835.tar.xz
sssd-9468a58f9bd191ef80c114943a288037c635a835.zip
Introduce pam_verbosity config option
Currently we display all PAM messages generated by sssd to the user. But only some of them are important and others are just some useful information. This patch introduces a new option to the PAM responder which controls what kind of messages are displayed. As an example the 'Authenticated with cached credentials' message is used. This message is only displayed if pam_verbosity=1 or if there is an expire date.
Diffstat (limited to 'src/config')
-rw-r--r--src/config/SSSDConfig.py1
-rw-r--r--src/config/etc/sssd.api.conf1
2 files changed, 2 insertions, 0 deletions
diff --git a/src/config/SSSDConfig.py b/src/config/SSSDConfig.py
index d27d2f8a6..1f54b4757 100644
--- a/src/config/SSSDConfig.py
+++ b/src/config/SSSDConfig.py
@@ -63,6 +63,7 @@ option_strings = {
'offline_credentials_expiration' : _('How long to allow cached logins between online logins (days)'),
'offline_failed_login_attempts' : _('How many failed logins attempts are allowed when offline'),
'offline_failed_login_delay' : _('How long (minutes) to deny login after offline_failed_login_attempts has been reached'),
+ 'pam_verbosity' : _('What kind of messages are displayed to the user during authentication'),
# [provider]
'id_provider' : _('Identity provider'),
diff --git a/src/config/etc/sssd.api.conf b/src/config/etc/sssd.api.conf
index ca85ed709..3bd0cc490 100644
--- a/src/config/etc/sssd.api.conf
+++ b/src/config/etc/sssd.api.conf
@@ -33,6 +33,7 @@ pwfield = str, None, false
offline_credentials_expiration = int, None, false
offline_failed_login_attempts = int, None, false
offline_failed_login_delay = int, None, false
+pam_verbosity = int, None, false
[provider]
#Available provider types