diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2013-11-06 14:12:11 +0100 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-06-03 13:31:25 +0200 |
commit | 2c3fa3a3264c957957db48c6c488049b6cf8b7a1 (patch) | |
tree | 5896b953c18d80bfce6657212400590829a818e3 /src/man | |
parent | f0875d13c3bd4766eea72b054365abfb9fd610a4 (diff) | |
download | sssd-2c3fa3a3264c957957db48c6c488049b6cf8b7a1.tar.gz sssd-2c3fa3a3264c957957db48c6c488049b6cf8b7a1.tar.xz sssd-2c3fa3a3264c957957db48c6c488049b6cf8b7a1.zip |
IFP: use a list of allowed_uids for authentication
Similar to the PAC responder, the InfoPipe uses a list of UIDs that are
allowed to communicate with the IFP responder.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Stef Walter <stefw@redhat.com>
(cherry picked from commit 3660f49f81e4db07be66fe0887af9d62065f1f2c)
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/sssd-ifp.5.xml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/src/man/sssd-ifp.5.xml b/src/man/sssd-ifp.5.xml index dfac25298..7e2ea7cfc 100644 --- a/src/man/sssd-ifp.5.xml +++ b/src/man/sssd-ifp.5.xml @@ -40,6 +40,38 @@ </para> </refsect1> + <refsect1 id='configuration-options'> + <title>CONFIGURATION OPTIONS</title> + <para> + These options can be used to configure the InfoPipe responder. + </para> + <variablelist> + <varlistentry> + <term>allowed_uids (string)</term> + <listitem> + <para> + Specifies the comma-separated list of UID values or + user names that are allowed to access the InfoPipe + responder. User names are resolved to UIDs at + startup. + </para> + <para> + Default: 0 (only the root user is allowed to access + the InfoPipe responder) + </para> + <para> + Please note that although the UID 0 is used as the + default it will be overwritten with this option. If + you still want to allow the root user to access the + InfoPipe responder, which would be the typical + case, you have to add 0 to the list of allowed UIDs + as well. + </para> + </listitem> + </varlistentry> + </variablelist> + </refsect1> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" /> </refentry> |