summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorPavel Březina <pbrezina@redhat.com>2013-09-13 15:48:10 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-09-20 20:13:36 +0200
commit6835cbe127490f99b5b28ddf133924d905cf78fd (patch)
treefea7f25a84617bcb2ae9695d6ab905f2f87ecebc /src
parent9dc153a402a36eeb6edbbf23ef489d957b9a76d0 (diff)
downloadsssd-6835cbe127490f99b5b28ddf133924d905cf78fd.tar.gz
sssd-6835cbe127490f99b5b28ddf133924d905cf78fd.tar.xz
sssd-6835cbe127490f99b5b28ddf133924d905cf78fd.zip
man: improve sssd-sudo manual page
Resolves: https://fedorahosted.org/sssd/ticket/2085
Diffstat (limited to 'src')
-rw-r--r--src/man/sssd-sudo.5.xml24
1 files changed, 22 insertions, 2 deletions
diff --git a/src/man/sssd-sudo.5.xml b/src/man/sssd-sudo.5.xml
index 361fdb7b2..de276ad2d 100644
--- a/src/man/sssd-sudo.5.xml
+++ b/src/man/sssd-sudo.5.xml
@@ -66,11 +66,31 @@ sudoers: files sss
<manvolnum>5</manvolnum>
</citerefentry>.
</para>
+ <para>
+ <emphasis>Note</emphasis>: in order to use netgroups or IPA
+ hostgroups in sudo rules, you also need to correctly set
+ <citerefentry>
+ <refentrytitle>nisdomainname</refentrytitle>
+ <manvolnum>1</manvolnum>
+ </citerefentry>
+ to your NIS domain name (which equals to IPA domain name when
+ using hostgroups).
+ </para>
</refsect1>
<refsect1 id='sssd'>
<title>Configuring SSSD to fetch sudo rules</title>
<para>
+ All configuration that is needed on SSSD side is to extend the list
+ of <emphasis>services</emphasis> with "sudo" in [sssd] section of
+ <citerefentry>
+ <refentrytitle>sssd.conf</refentrytitle>
+ <manvolnum>5</manvolnum>
+ </citerefentry>. To speed up the LDAP lookups, you can also set
+ search base for sudo rules using
+ <emphasis>ldap_sudo_search_base</emphasis> option.
+ </para>
+ <para>
The following example shows how to configure SSSD to download sudo
rules from an LDAP server.
</para>
@@ -89,8 +109,8 @@ ldap_sudo_search_base = ou=sudoers,dc=example,dc=com
</programlisting>
</para>
<para>
- When the SSSD is configured to use the IPA provider, the sudo
- provider is automatically enabled. The sudo search base
+ When the SSSD is configured to use IPA as the ID provider,
+ the sudo provider is automatically enabled. The sudo search base
is configured to use the compat tree (ou=sudoers,$DC).
</para>
</refsect1>