diff options
| author | Sumit Bose <sbose@redhat.com> | 2014-09-16 15:26:24 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-10-16 17:55:56 +0200 |
| commit | 08ab0d4ede41a1749e0bc26f78a37a4d10c20db8 (patch) | |
| tree | a1d48e031c34d373e57927a0935411f41f0cf9bc /src/man | |
| parent | 00c283ca719717ed483958571982d0e9ff95c4b1 (diff) | |
| download | sssd-08ab0d4ede41a1749e0bc26f78a37a4d10c20db8.tar.gz sssd-08ab0d4ede41a1749e0bc26f78a37a4d10c20db8.tar.xz sssd-08ab0d4ede41a1749e0bc26f78a37a4d10c20db8.zip | |
IPA: add view support and get view name
Related to https://fedorahosted.org/sssd/ticket/2375
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/sssd-ipa.5.xml | 142 |
1 files changed, 142 insertions, 0 deletions
diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml index dfcc595de..51f14f8fc 100644 --- a/src/man/sssd-ipa.5.xml +++ b/src/man/sssd-ipa.5.xml @@ -346,6 +346,25 @@ </varlistentry> <varlistentry> + <term>ipa_views_search_base (string)</term> + <listitem> + <para> + Optional. Use the given string as search base for + views containers. + </para> + <para> + See <quote>ldap_search_base</quote> for + information about configuring multiple search + bases. + </para> + <para> + Default: the value of + <emphasis>cn=views,cn=accounts,%basedn</emphasis> + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>krb5_validate (boolean)</term> <listitem> <para> @@ -519,6 +538,129 @@ </varlistentry> </variablelist> </para> + <refsect2 id='views'> + <title>VIEWS AND OVERRIDES</title> + <para> + SSSD can handle views and overrides which are offered by + FreeIPA 4.1 and later version. Since all paths and objectclasses + are fixed on the server side there is basically no need to + configure anything. For completeness the related options are + listed here with their default values. + <variablelist> + <varlistentry> + <term>ipa_view_class (string)</term> + <listitem> + <para> + Objectclass of the view container. + </para> + <para> + Default: nsContainer + </para> + </listitem> + </varlistentry> + + <varlistentry> + <term>ipa_view_name (string)</term> + <listitem> + <para> + Name of the attribute holding the name of the + view. + </para> + <para> + Default: cn + </para> + </listitem> + </varlistentry> + + <varlistentry> + <term>ipa_overide_object_class (string)</term> + <listitem> + <para> + Objectclass of the override objects. + </para> + <para> + Default: ipaOverrideAnchor + </para> + </listitem> + </varlistentry> + + <varlistentry> + <term>ipa_anchor_uuid (string)</term> + <listitem> + <para> + Name of the attribute containing the reference + to the original object in a remote domain. + </para> + <para> + Default: ipaAnchorUUID + </para> + </listitem> + </varlistentry> + + <varlistentry> + <term>ipa_user_override_object_class (string)</term> + <listitem> + <para> + Name of the objectclass for user overrides. It + is used to determine if the found override + object is related to a user or a group. + </para> + <para> + User overrides can contain attributes given by + <itemizedlist> + <listitem> + <para>ldap_user_name</para> + </listitem> + <listitem> + <para>ldap_user_uid_number</para> + </listitem> + <listitem> + <para>ldap_user_gid_number</para> + </listitem> + <listitem> + <para>ldap_user_gecos</para> + </listitem> + <listitem> + <para>ldap_user_home_directory</para> + </listitem> + <listitem> + <para>ldap_user_shell</para> + </listitem> + </itemizedlist> + </para> + <para> + Default: ipaUserOverride + </para> + </listitem> + </varlistentry> + + <varlistentry> + <term>ipa_group_override_object_class (string)</term> + <listitem> + <para> + Name of the objectclass for group overrides. It + is used to determine if the found override + object is related to a user or a group. + </para> + <para> + Group overrides can contain attributes given by + <itemizedlist> + <listitem> + <para>ldap_group_name</para> + </listitem> + <listitem> + <para>ldap_group_gid_number</para> + </listitem> + </itemizedlist> + </para> + <para> + Default: ipaGroupOverride + </para> + </listitem> + </varlistentry> + </variablelist> + </para> + </refsect2> </refsect1> <refsect1 id='subdomains_provider'> |