summaryrefslogtreecommitdiffstats
path: root/src/man/sssd-ifp.5.xml
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-11-06 14:12:11 +0100
committerJakub Hrozek <jhrozek@redhat.com>2014-05-13 21:46:57 +0200
commit3660f49f81e4db07be66fe0887af9d62065f1f2c (patch)
treec7f85d5103fd68d823136239f7cc006bb5ec07c2 /src/man/sssd-ifp.5.xml
parentf92ace4a52602e8c38a34f2392bec3deeac2dddd (diff)
downloadsssd-3660f49f81e4db07be66fe0887af9d62065f1f2c.tar.gz
sssd-3660f49f81e4db07be66fe0887af9d62065f1f2c.tar.xz
sssd-3660f49f81e4db07be66fe0887af9d62065f1f2c.zip
IFP: use a list of allowed_uids for authentication
Similar to the PAC responder, the InfoPipe uses a list of UIDs that are allowed to communicate with the IFP responder. Reviewed-by: Pavel Březina <pbrezina@redhat.com> Reviewed-by: Stef Walter <stefw@redhat.com>
Diffstat (limited to 'src/man/sssd-ifp.5.xml')
-rw-r--r--src/man/sssd-ifp.5.xml32
1 files changed, 32 insertions, 0 deletions
diff --git a/src/man/sssd-ifp.5.xml b/src/man/sssd-ifp.5.xml
index dfac25298..7e2ea7cfc 100644
--- a/src/man/sssd-ifp.5.xml
+++ b/src/man/sssd-ifp.5.xml
@@ -40,6 +40,38 @@
</para>
</refsect1>
+ <refsect1 id='configuration-options'>
+ <title>CONFIGURATION OPTIONS</title>
+ <para>
+ These options can be used to configure the InfoPipe responder.
+ </para>
+ <variablelist>
+ <varlistentry>
+ <term>allowed_uids (string)</term>
+ <listitem>
+ <para>
+ Specifies the comma-separated list of UID values or
+ user names that are allowed to access the InfoPipe
+ responder. User names are resolved to UIDs at
+ startup.
+ </para>
+ <para>
+ Default: 0 (only the root user is allowed to access
+ the InfoPipe responder)
+ </para>
+ <para>
+ Please note that although the UID 0 is used as the
+ default it will be overwritten with this option. If
+ you still want to allow the root user to access the
+ InfoPipe responder, which would be the typical
+ case, you have to add 0 to the list of allowed UIDs
+ as well.
+ </para>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+ </refsect1>
+
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />
</refentry>