summaryrefslogtreecommitdiffstats
path: root/src/man/sssd-ipa.5.xml
Commit message (Collapse)AuthorAgeFilesLines
* MAN: Clarify the new krb5_use_fast IPA defaultJakub Hrozek2014-02-171-0/+34
|
* Fix two minor typosYuri Chornoivan2013-07-251-1/+1
|
* IPA: Add a server mode optionJakub Hrozek2013-06-281-0/+19
| | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1993 SSSD needs to know that it is running on an IPA server and should not look up trusted users and groups with the help of the extdom plugin but do the lookups on its own. For this a new boolean configuration option, is introduced which defaults to false but is set to true during ipa-server-install or during updates of the FreeIPA server if it is not already set.
* MAN: state default dyndns interfaceOndrej Kos2013-05-301-1/+4
| | | | https://fedorahosted.org/sssd/ticket/1924
* man: Note that IPA updates are secured with GSS-TSIGJakub Hrozek2013-05-141-1/+2
|
* Fix minor typosYuri Chornoivan2013-05-061-1/+1
|
* dyndns: new option dyndns_force_tcpJakub Hrozek2013-05-031-0/+13
| | | | | | | https://fedorahosted.org/sssd/ticket/1831 Adds a new option that can be used to force nsupdate to only use TCP to communicate with the DNS server.
* dyndns: New option dyndns_update_ptrJakub Hrozek2013-05-031-0/+20
| | | | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1832 While some servers, such as FreeIPA allow the PTR record to be synchronized when the forward record is updated, other servers, including Active Directory, require that the PTR record is synchronized manually. This patch adds a new option, dyndns_update_ptr that automatically generates appropriate DNS update message for updating the reverse zone. This option is off by default in the IPA provider. Also renames be_nsupdate_create_msg to be_nsupdate_create_fwd_msg
* dyndns: new option dyndns_refresh_intervalJakub Hrozek2013-05-031-0/+16
| | | | | | | This new options adds the possibility of updating the DNS entries periodically regardless if they have changed or not. This feature will be useful mainly in AD environments where the Windows clients periodically update their DNS records.
* Convert IPA-specific options to be back-end agnosticJakub Hrozek2013-05-031-5/+23
| | | | | | This patch introduces new options for dynamic DNS updates that are not specific to any back end. The current ipa dyndns options are still usable, just with a deprecation warning.
* DNS sites support - add IPA SRV pluginPavel Březina2013-04-101-0/+26
| | | | https://fedorahosted.org/sssd/ticket/1032
* Fix typos in man pagesYuri Chornoivan2013-04-031-1/+1
|
* Make the SELinux refresh time configurable.Michal Zidek2013-03-191-0/+17
| | | | Option ipa_selinux_refresh is added to basic ipa options.
* Run IPA subdomain provider if IPA ID provider is configuredSumit Bose2012-11-141-0/+23
| | | | | | | | | | | | | | | | | | | | | | | | To make configuration easier the IPA subdomain provider should be always loaded if the IPA ID provider is configured and the subdomain provider is not explicitly disabled. But to avoid the overhead of regular subdomain requests in setups where no subdomains are used the IPA subdomain provider should behave differently if configured explicit or implicit. If the IPA subdomain provider is configured explicitly, i.e. 'subdomains_provider = ipa' can be found in the domain section of sssd.conf subdomain request are always send to the server if needed. If it is configured implicitly and a request to the server fails with an indication that the server currently does not support subdomains at all, e.g. is not configured to handle trust relationships, a new request will be only send to the server after a long timeout or after a going-online event. To be able to make this distinction this patch save the configuration status to the subdomain context. Fixes https://fedorahosted.org/sssd/ticket/1613
* Always start PAC responder if IPA ID provider is configuredSumit Bose2012-11-141-0/+6
| | | | | | | | Since the PAC responder is used during the authentication of users from trusted realms it is started automatically if the IPA ID provider is configured for a domain to simplify the configuration. Fixes https://fedorahosted.org/sssd/ticket/1613
* Make TTL configurable for dynamic dns updatesJames Hogarth2012-10-161-0/+14
|
* man: Note that automounter must be restarted to re-read the master mapJakub Hrozek2012-10-051-0/+1
| | | | https://fedorahosted.org/sssd/ticket/1563
* Fix various typos in documentation.Yuri Chornoivan2012-08-031-1/+1
|
* Primary server support: new option in IPA providerJan Zeleny2012-08-011-1/+1
| | | | | | This patch adds support for new config option ipa_backup_server. The description of this option's functionality is included in man page in one of previous patches.
* MAN: Unify "SEE ALSO" sectionsStephen Gallagher2012-07-061-17/+2
|
* IPA subdomains - ask for information about master domainJan Zeleny2012-06-101-0/+19
| | | | | | | The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain.
* IPA: Add get-domains targetSumit Bose2012-04-241-0/+19
|
* AUTOFS: IPA providerJakub Hrozek2012-02-071-0/+12
|
* IPA: Add host info handlerJan Cholasta2012-02-071-0/+12
|
* Man pages for the session target and SELinux user maps fetchingJan Zeleny2012-02-061-0/+140
|
* IPA: Detect nsupdate support for the realm directiveStephen Gallagher2012-01-171-0/+5
| | | | | For older platforms, do not add the 'realm' line in the update message
* Add info about ipa_host_search_base to man pageJan Zeleny2012-01-141-0/+29
| | | | | Also add comment that setting ipa_hbac_support_srchost to False disables search filters given in ipa_host_search_base
* Add ipa_hbac_support_srchost option to IPA providerJan Zeleny2011-11-291-0/+12
| | | | | don't fetch all host groups if this option is false https://fedorahosted.org/sssd/ticket/1078
* Added and modified options for IPA netgroupsJan Zeleny2011-11-231-1/+88
|
* Fix typos in manual pagesYuri Chornoivan2011-11-101-1/+1
|
* Add support to request canonicalization on krb AS requestsJan Zeleny2011-11-021-0/+17
| | | | https://fedorahosted.org/sssd/ticket/957
* man page fix (lists are comma-separated)Jan Zeleny2011-10-131-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1024
* Add ipa_hbac_treat_deny_as optionStephen Gallagher2011-07-081-0/+27
| | | | | | By default, we will treat the presence of any DENY rule as denying all users. This option will allow the admin to explicitly ignore DENY rules during a transitional period.
* Add ipa_hbac_refresh optionStephen Gallagher2011-07-081-0/+15
| | | | | This option describes the time between refreshes of the HBAC rules on the IPA server.
* Use realm for basedn instead of IPA domainJakub Hrozek2011-02-281-0/+15
| | | | https://fedorahosted.org/sssd/ticket/807
* Add ipa_hbac_search_base config optionSumit Bose2011-01-191-0/+13
|
* Man pages should mention supported providersJan Zeleny2010-10-131-0/+4
| | | | | | | Each back end can support id, auth or access provider, but each back end supports different subset of these. Man pages should describe which providers are supported by each back end. Ticket: #615
* Add dynamic DNS updates to FreeIPAStephen Gallagher2010-05-161-0/+28
| | | | | | | | | | | | | | | | | | This adds two new options: ipa_dyndns_update: Boolean value to select whether this client should automatically update its IP address in FreeIPA DNS. ipa_dyndns_iface: Choose an interface manually to use for updating dynamic DNS. Default is to use the interface associated with the LDAP connection to FreeIPA. This patch supports A and AAAA records. It relies on the presence of the nsupdate tool from the bind-utils package to perform the actual update step. The location of this utility is set at build time, but its availability is determined at runtime (so clients that do not require dynamic update capability do not need to meet this dependency).
* Revert "Add dynamic DNS updates to FreeIPA"Stephen Gallagher2010-05-071-28/+0
| | | | | | | This reverts commit 973b7c27c0b294b8b2f120296f64c6a3a36e44b7. While this patch applied cleanly, it was uncompilable. Reverting until it can be properly merged.
* Add dynamic DNS updates to FreeIPAStephen Gallagher2010-05-071-0/+28
| | | | | | | | | | | | | | | | | | This adds two new options: ipa_dyndns_update: Boolean value to select whether this client should automatically update its IP address in FreeIPA DNS. ipa_dyndns_iface: Choose an interface manually to use for updating dynamic DNS. Default is to use the interface associated with the LDAP connection to FreeIPA. This patch supports A and AAAA records. It relies on the presence of the nsupdate tool from the bind-utils package to perform the actual update step. The location of this utility is set at build time, but its availability is determined at runtime (so clients that do not require dynamic update capability do not need to meet this dependency).
* Use service discovery in backendsJakub Hrozek2010-05-071-0/+4
| | | | | | | | | Integrate the failover improvements with our back ends. The DNS domain used in the SRV query is always the SSSD domain name. Please note that this patch changes the default value of ldap_uri from "ldap://localhost" to "NULL" in order to use service discovery with no server set.
* Rename server/ directory to src/Stephen Gallagher2010-02-181-0/+159
Also update BUILD.txt
generated by cgit (git 2.34.1) at 2024-05-02 19:48:45 +0000