summaryrefslogtreecommitdiffstats
path: root/src/man/sssd.conf.5.xml
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2012-11-09 21:31:23 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-11-14 11:20:23 +0100
commita7a2839f8bbeec894a4e35031806f1702502e150 (patch)
tree237bdce0556fd0b7b120264e6b1abfac98fd9dde /src/man/sssd.conf.5.xml
parent0a564940c04dd9500b8d72bae723b165c3690b26 (diff)
downloadsssd-a7a2839f8bbeec894a4e35031806f1702502e150.tar.gz
sssd-a7a2839f8bbeec894a4e35031806f1702502e150.tar.xz
sssd-a7a2839f8bbeec894a4e35031806f1702502e150.zip
Run IPA subdomain provider if IPA ID provider is configured
To make configuration easier the IPA subdomain provider should be always loaded if the IPA ID provider is configured and the subdomain provider is not explicitly disabled. But to avoid the overhead of regular subdomain requests in setups where no subdomains are used the IPA subdomain provider should behave differently if configured explicit or implicit. If the IPA subdomain provider is configured explicitly, i.e. 'subdomains_provider = ipa' can be found in the domain section of sssd.conf subdomain request are always send to the server if needed. If it is configured implicitly and a request to the server fails with an indication that the server currently does not support subdomains at all, e.g. is not configured to handle trust relationships, a new request will be only send to the server after a long timeout or after a going-online event. To be able to make this distinction this patch save the configuration status to the subdomain context. Fixes https://fedorahosted.org/sssd/ticket/1613
Diffstat (limited to 'src/man/sssd.conf.5.xml')
-rw-r--r--src/man/sssd.conf.5.xml14
1 files changed, 9 insertions, 5 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index cae413ddc..c26f043a6 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -1410,8 +1410,9 @@ override_homedir = /home/%u
<term>subdomains_provider (string)</term>
<listitem>
<para>
- The provider which should handle fetching of subdomains.
- This value should be always the same as id_provider.
+ The provider which should handle fetching of
+ subdomains. This value should be always the same as
+ id_provider.
Supported subdomain providers are:
</para>
<para>
@@ -1420,13 +1421,16 @@ override_homedir = /home/%u
<citerefentry>
<refentrytitle>sssd-ipa</refentrytitle>
<manvolnum>5</manvolnum>
- </citerefentry> for more information on configuring IPA.
+ </citerefentry> for more information on configuring
+ IPA.
</para>
<para>
- <quote>none</quote> disallows fetching subdomains explicitly.
+ <quote>none</quote> disallows fetching subdomains
+ explicitly.
</para>
<para>
- Default: none
+ Default: The value of <quote>id_provider</quote> is
+ used if it is set.
</para>
</listitem>
</varlistentry>