summaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2011-05-17 16:49:19 +0200
committerStephen Gallagher <sgallagh@redhat.com>2011-06-02 15:30:29 -0400
commit9b5eccc8894994151e33fc4546b97b76b2da5b1d (patch)
treeb5e7624aa60772779082eff4eed3098ab351fecc /src/man
parent72c3252abe5d200e8e3a5a1ad26b6b96d2beffef (diff)
downloadsssd-9b5eccc8894994151e33fc4546b97b76b2da5b1d.tar.gz
sssd-9b5eccc8894994151e33fc4546b97b76b2da5b1d.tar.xz
sssd-9b5eccc8894994151e33fc4546b97b76b2da5b1d.zip
Add new options to override shell value
https://fedorahosted.org/sssd/ticket/742 Conflicts: src/conf_macros.m4
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd.conf.5.xml44
1 files changed, 44 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index 57454dd86..b4f384657 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -391,6 +391,50 @@
</para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>allowed_shells (string)</term>
+ <listitem>
+ <para>
+ Restrict user shell to one of the listed values. The order of evaluation is:
+ </para>
+ <para>
+ 1. If the shell is present in
+ <quote>/etc/shells</quote>, it is used.
+ </para>
+ <para>
+ 2. If the shell is in the allowed_shells list but
+ not in <quote>/etc/shells</quote>, use the
+ value of the shell_fallback parameter.
+ </para>
+ <para>
+ 3. If the shell is not in the allowed_shells list and
+ not in <quote>/etc/shells</quote>, a nologin shell
+ is used.
+ </para>
+ <para>
+ An empty string for shell is passed as-is to libc.
+ </para>
+ <para>
+ The <quote>/etc/shells</quote> is only read on SSSD start up, which means that
+ a restart of the SSSD is required in case a new shell is installed.
+ </para>
+ <para>
+ Default: Not set. The user shell is automatically used.
+ </para>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>shell_fallback (string)</term>
+ <listitem>
+ <para>
+ The default shell to use if an allowed shell is not
+ installed on the machine.
+ </para>
+ <para>
+ Default: /bin/sh
+ </para>
+ </listitem>
+ </varlistentry>
</variablelist>
</refsect2>
<refsect2 id='PAM'>