diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2011-05-17 16:49:19 +0200 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-06-02 15:30:29 -0400 |
commit | 9b5eccc8894994151e33fc4546b97b76b2da5b1d (patch) | |
tree | b5e7624aa60772779082eff4eed3098ab351fecc /src/man | |
parent | 72c3252abe5d200e8e3a5a1ad26b6b96d2beffef (diff) | |
download | sssd-9b5eccc8894994151e33fc4546b97b76b2da5b1d.tar.gz sssd-9b5eccc8894994151e33fc4546b97b76b2da5b1d.tar.xz sssd-9b5eccc8894994151e33fc4546b97b76b2da5b1d.zip |
Add new options to override shell value
https://fedorahosted.org/sssd/ticket/742
Conflicts:
src/conf_macros.m4
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/sssd.conf.5.xml | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 57454dd86..b4f384657 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -391,6 +391,50 @@ </para> </listitem> </varlistentry> + <varlistentry> + <term>allowed_shells (string)</term> + <listitem> + <para> + Restrict user shell to one of the listed values. The order of evaluation is: + </para> + <para> + 1. If the shell is present in + <quote>/etc/shells</quote>, it is used. + </para> + <para> + 2. If the shell is in the allowed_shells list but + not in <quote>/etc/shells</quote>, use the + value of the shell_fallback parameter. + </para> + <para> + 3. If the shell is not in the allowed_shells list and + not in <quote>/etc/shells</quote>, a nologin shell + is used. + </para> + <para> + An empty string for shell is passed as-is to libc. + </para> + <para> + The <quote>/etc/shells</quote> is only read on SSSD start up, which means that + a restart of the SSSD is required in case a new shell is installed. + </para> + <para> + Default: Not set. The user shell is automatically used. + </para> + </listitem> + </varlistentry> + <varlistentry> + <term>shell_fallback (string)</term> + <listitem> + <para> + The default shell to use if an allowed shell is not + installed on the machine. + </para> + <para> + Default: /bin/sh + </para> + </listitem> + </varlistentry> </variablelist> </refsect2> <refsect2 id='PAM'> |