summaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2013-07-11 10:06:09 -0400
committerJakub Hrozek <jhrozek@redhat.com>2013-07-29 12:59:17 +0200
commit1933ff17513da1d979dd22776a03478341ef5e6b (patch)
tree0114f3aacf1755a7b2372d3c319a29daadd0e5e2 /src/man
parent680ddbdf8478f26cbb5efc9b712ea35714e089ba (diff)
downloadsssd-1933ff17513da1d979dd22776a03478341ef5e6b.tar.gz
sssd-1933ff17513da1d979dd22776a03478341ef5e6b.tar.xz
sssd-1933ff17513da1d979dd22776a03478341ef5e6b.zip
Netgroups should ignore the 'use_fully_qualified_names' setting
Netgroups often have memberNisNetgroup entries included in them that will never process correctly if we require fully-qualified names on the nested lookup. This patch alters the behavior of netgroup lookups to check *all* domains for an unqualified netgroup name, instead of only the ones not requiring fully- qualified names. https://fedorahosted.org/sssd/ticket/2013
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd.conf.5.xml7
1 files changed, 7 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index 4f01794d6..31150a6aa 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -1213,6 +1213,13 @@ override_homedir = /home/%u
passwd test@LOCAL</command> would.
</para>
<para>
+ NOTE: This option has no effect on netgroup
+ lookups due to their tendency to include nested
+ netgroups without qualified names. For netgroups,
+ all domains will be searched when an unqualified
+ name is requested.
+ </para>
+ <para>
Default: FALSE
</para>
</listitem>