diff options
author | Stephen Gallagher <sgallagh@redhat.com> | 2010-12-22 11:00:22 -0500 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-12-22 13:22:28 -0500 |
commit | c71ff1e4615ec8560b90ca7d4827d99424ad0355 (patch) | |
tree | 5f1ccd75d8e6dfcb9d5a3898ebc9368dabcca261 /src/man | |
parent | 7da6ae5558059218d660d879057f6e39864c3493 (diff) | |
download | sssd-c71ff1e4615ec8560b90ca7d4827d99424ad0355.tar.gz sssd-c71ff1e4615ec8560b90ca7d4827d99424ad0355.tar.xz sssd-c71ff1e4615ec8560b90ca7d4827d99424ad0355.zip |
Update the ID cache for any PAM request
Also adds an option to limit how often we check the ID provider,
so that conversations with multiple PAM requests won't update the
cache multiple times.
https://fedorahosted.org/sssd/ticket/749
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/sssd.conf.5.xml | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 7392dd093..96b7a4c3c 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -440,6 +440,28 @@ </para> </listitem> </varlistentry> + <varlistentry> + <term>pam_id_timeout (integer)</term> + <listitem> + <para> + For any PAM request while SSSD is online, the SSSD will + attempt to immediately update the cached identity + information for the user in order to ensure that + authentication takes place with the latest information. + </para> + <para> + A complete PAM conversation may perform multiple PAM + requests, such as account management and session + opening. This option controls (on a + per-client-application basis) how long (in seconds) we + can cache the identity information to avoid excessive + round-trips to the identity provider. + </para> + <para> + Default: 5 + </para> + </listitem> + </varlistentry> </variablelist> </refsect2> </refsect1> |