diff options
author | Pavel Reichl <preichl@redhat.com> | 2015-04-30 06:43:05 -0400 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-05-28 11:24:21 +0200 |
commit | c494e100f9b2422e2890507f63019afcaff9b7c6 (patch) | |
tree | 94fdfcc88f25273b85f3aaf934522920b298ad4d /src/man | |
parent | d788ec2d8205639dcb560800852d7fe89bcc33f7 (diff) | |
download | sssd-c494e100f9b2422e2890507f63019afcaff9b7c6.tar.gz sssd-c494e100f9b2422e2890507f63019afcaff9b7c6.tar.xz sssd-c494e100f9b2422e2890507f63019afcaff9b7c6.zip |
krb5: new option krb5_map_user
New option `krb5_map_user` providing mapping of ID provider names to
Kerberos principals.
Resolves:
https://fedorahosted.org/sssd/ticket/2509
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/sssd-krb5.5.xml | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml index 9f61f8f70..da62b2507 100644 --- a/src/man/sssd-krb5.5.xml +++ b/src/man/sssd-krb5.5.xml @@ -516,6 +516,42 @@ </listitem> </varlistentry> + <varlistentry> + <term>krb5_map_user (string)</term> + <listitem> + <para> + The list of mappings is given as a comma-separated + list of pairs <quote>username:primary</quote> + where <quote>username</quote> is a UNIX user name + and <quote>primary</quote> is a user part of + a kerberos principal. This mapping is used when + user is authenticating using + <quote>auth_provider = krb5</quote>. + </para> + + <para> + example: +<programlisting> +krb5_realm = REALM +krb5_map_user = joe:juser,dick:richard +</programlisting> + </para> + <para> + <quote>joe</quote> and <quote>dick</quote> are + UNIX user names and <quote>juser</quote> and + <quote>richard</quote> are primaries of kerberos + principals. For user <quote>joe</quote> resp. + <quote>dick</quote> SSSD will try to kinit as + <quote>juser@REALM</quote> resp. + <quote>richard@REALM</quote>. + </para> + + <para> + Default: not set + </para> + </listitem> + </varlistentry> + </variablelist> </para> </refsect1> |