diff options
| author | Sumit Bose <sbose@redhat.com> | 2012-11-13 21:21:38 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-11-14 10:42:34 +0100 |
| commit | 778491bebee536a196afc29b0d9953843a5374b2 (patch) | |
| tree | 947d73e6623bad45ac9710753c8a2037b45c24a5 /src/man/sssd-ipa.5.xml | |
| parent | 032d0980dfe5a27a5954f44f9d519e03fc7d1ced (diff) | |
| download | sssd-778491bebee536a196afc29b0d9953843a5374b2.tar.gz sssd-778491bebee536a196afc29b0d9953843a5374b2.tar.xz sssd-778491bebee536a196afc29b0d9953843a5374b2.zip | |
Always start PAC responder if IPA ID provider is configured
Since the PAC responder is used during the authentication of users from
trusted realms it is started automatically if the IPA ID provider is
configured for a domain to simplify the configuration.
Fixes https://fedorahosted.org/sssd/ticket/1613
Diffstat (limited to 'src/man/sssd-ipa.5.xml')
| -rw-r--r-- | src/man/sssd-ipa.5.xml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml index db6aecf86..da5a2ffb4 100644 --- a/src/man/sssd-ipa.5.xml +++ b/src/man/sssd-ipa.5.xml @@ -58,6 +58,12 @@ refer to freeipa.org for more information about HBAC. No configuration of access provider is required on the client side. </para> + <para> + The IPA provider will use the PAC responder if the Kerberos tickets + of users from trusted realms contain a PAC. To make configuration + easier the PAC responder is started automatically if the IPA ID + provider is configured. + </para> </refsect1> <refsect1 id='file-format'> |