summaryrefslogtreecommitdiffstats
path: root/src/man
Commit message (Collapse)AuthorAgeFilesLines
* Remove enumerate=true from man sssd-ldapJakub Hrozek2013-08-091-1/+0
| | | | https://fedorahosted.org/sssd/ticket/1737
* Adding option to disable retrieving large AD groups.sssd-1.9.2-113.el6Lukas Slebodnik2013-08-091-0/+21
| | | | | | | | | This commit adds new option ldap_disable_range_retrieval with default value FALSE. If this option is enabled, large groups(>1500) will not be retrieved and behaviour will be similar like was before commit ae8d047122c "LDAP: Handle very large Active Directory groups" https://fedorahosted.org/sssd/ticket/1823
* MAN: Fix the title of sssd-sudosssd-1.9.2-111.el6Jakub Hrozek2013-08-091-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1710
* Document what does access_provider=ad dosssd-1.9.2-110.el6Jakub Hrozek2013-08-091-0/+14
| | | | https://fedorahosted.org/sssd/ticket/1841
* Add ignore_group_members option.sssd-1.9.2-102.el6Paul B. Henson2013-08-081-0/+17
| | | | https://fedorahosted.org/sssd/ticket/1376
* NSS: Add original homedir to home directory template optionssssd-1.9.2-101.el6Stephen Gallagher2013-08-081-0/+7
| | | | https://fedorahosted.org/sssd/ticket/1805
* MAN: Clarify the min_id/max_id limits furthersssd-1.9.2-99.el6Jakub Hrozek2013-08-081-0/+4
| | | | | | | | | https://fedorahosted.org/sssd/ticket/2005 Some users were confused by our description of min_id/max_id and thought the limits only applied to returning entries from the NSS responder. However, the limits are actually enforced on the back end side, so the entries are not even saved to cache.
* MAN: Clarify that saving users after enumerating large domain might be CPU ↵sssd-1.9.2-95Jakub Hrozek2013-07-251-1/+9
| | | | | | intensive https://fedorahosted.org/sssd/ticket/1732
* ldap: Fallback option for rfc2307 schemaSimo Sorce2013-04-151-0/+31
| | | | | | | | | | | Add option to fallback to fetch local users if rfc2307is being used. This is useful for cases where people added local users as LDAP members and rely on these group memberships to be maintained on the local host. Disabled by default as it violates identity domain separation. Ticket: https://fedorahosted.org/sssd/ticket/1020
* try primary server after retry_timeout + 1 seconds when switching to backup1.9.2-48Pavel Březina2012-12-181-1/+1
| | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1679 The problem is when we are about to reset the server status, we don't get through the timeout (30 seconds) because the "switch to primary server" task is scheduled 30 seconds after fall back to a backup server. Thus the server status remains "not working" and is resetted after another 30 seconds. We need to make sure that the server status is tried after the timeout period. retry_timeout is currently hardcoded to 30, thus the change in man page.
* sudo manpage: clarify that sudoHost may contain wildcards and not regular ↵1.9.2-41Pavel Březina2012-12-142-2/+2
| | | | | | expression https://fedorahosted.org/sssd/ticket/1690
* MAN: Move ssh_known_hosts_timeout documentation to the correct sectionJan Cholasta2012-12-141-12/+12
|
* LDAP: Make it possible to use full principal in ldap_sasl_authid againJakub Hrozek2012-11-201-0/+5
|
* MAN: document the ldap_sasl_realm optionJakub Hrozek2012-11-201-0/+13
| | | | The option was completely undocumented.
* Run IPA subdomain provider if IPA ID provider is configuredSumit Bose2012-11-142-5/+32
| | | | | | | | | | | | | | | | | | | | | | | | To make configuration easier the IPA subdomain provider should be always loaded if the IPA ID provider is configured and the subdomain provider is not explicitly disabled. But to avoid the overhead of regular subdomain requests in setups where no subdomains are used the IPA subdomain provider should behave differently if configured explicit or implicit. If the IPA subdomain provider is configured explicitly, i.e. 'subdomains_provider = ipa' can be found in the domain section of sssd.conf subdomain request are always send to the server if needed. If it is configured implicitly and a request to the server fails with an indication that the server currently does not support subdomains at all, e.g. is not configured to handle trust relationships, a new request will be only send to the server after a long timeout or after a going-online event. To be able to make this distinction this patch save the configuration status to the subdomain context. Fixes https://fedorahosted.org/sssd/ticket/1613
* Always start PAC responder if IPA ID provider is configuredSumit Bose2012-11-141-0/+6
| | | | | | | | Since the PAC responder is used during the authentication of users from trusted realms it is started automatically if the IPA ID provider is configured for a domain to simplify the configuration. Fixes https://fedorahosted.org/sssd/ticket/1613
* MAN: Specify the correct location for the force_timeout optionStephen Gallagher2012-11-111-16/+32
|
* Updating the translations for the 1.9.2 releasesssd-1_9_2Jakub Hrozek2012-10-1213-2026/+2893
|
* MAN: improve wording of default_domain parameterJakub Hrozek2012-10-121-5/+5
|
* Fix language errors in the sssd-krb5.conf man pageE Deon Lackey2012-10-111-70/+71
|
* Add more info about ticket validationOndrej Kos2012-10-101-1/+7
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1499 Adds log message about not finding appropriate entry in keytab and using the last keytab entry when validation is enabled. Adds more information about validation into manpage.
* Fix typosYuri Chornoivan2012-10-091-1/+1
|
* Updating the translations for 1.9.1 releasesssd-1_9_1Jakub Hrozek2012-10-0513-10238/+12658
|
* man: Note that automounter must be restarted to re-read the master mapJakub Hrozek2012-10-055-0/+10
| | | | https://fedorahosted.org/sssd/ticket/1563
* manpage: ldap_access_filter is not always mandatoryPavel Březina2012-10-051-5/+7
| | | | https://fedorahosted.org/sssd/ticket/1540
* SSH: Expire hosts in known_hostsJan Cholasta2012-10-051-0/+12
|
* Fix default upper limit of slicesOndrej Kos2012-10-041-1/+1
| | | | | | | https://fedorahosted.org/sssd/ticket/1537 changes upper limit of slices to 2000200000 in providers code and manpage.
* Note that Range Retrieval is not supported when filter is used in the search ↵Jakub Hrozek2012-10-032-2/+14
| | | | | | base. https://fedorahosted.org/sssd/ticket/1471
* sss_seed: Passwords longer then PASS_MAX not allowed.Michal Zidek2012-10-031-0/+12
| | | | | | | | sss_seed fails if password file specified with -p or --password-file option contains password longer than PASS_MAX. Man pages inform about PASS_MAX limitation.
* Include param_help_py.xml in the list of po4a sourcesJakub Hrozek2012-10-021-0/+1
|
* Flip the default value of ldap_initgroups_use_matching_rule_in_chainJakub Hrozek2012-10-021-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1535
* Add man page section about provider specific re_expressionSumit Bose2012-10-021-8/+33
| | | | Fixes: https://fedorahosted.org/sssd/ticket/1525
* sudo and autofs search bases should not be marked experimentalJakub Hrozek2012-10-011-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1541
* Change option to display help message in man pages.Michal Zidek2012-10-013-2/+12
| | | | | | | POPT_AUTOHELP generates -? and --help options and not -h to display help message. https://fedorahosted.org/sssd/ticket/1546
* Document ldap_chpass_update_last_changeJakub Hrozek2012-10-011-0/+15
| | | | | | Add the option to the manual page and the configAPI https://fedorahosted.org/sssd/ticket/1494
* Add new option default_domain_suffixSumit Bose2012-10-011-0/+24
|
* sssd-ldap manpage: ldap_scheme formattingOndrej Kos2012-09-261-6/+26
| | | | | | fixes https://fedorahosted.org/sssd/ticket/1483 ldap schemes now displayed as bullet list
* Updating translations for the 1.9.0 releasesssd-1_9_0Jakub Hrozek2012-09-2413-3837/+3931
|
* autofs, sudo, ssh and PAC are not experimental anymoreJakub Hrozek2012-09-244-29/+0
|
* Updating the translations for the 1.9.0 RC1 releasesssd-1_9_0_rc1sssd-1_8_98Jakub Hrozek2012-09-1311-24/+94
|
* Update translations for 1.9.0 beta 7 releasesssd-1_9_0_beta7sssd-1_8_97Jakub Hrozek2012-09-0514-6534/+13778
|
* MAN: Improve description of ldap_*_search_base optionsStephen Gallagher2012-08-104-96/+63
| | | | | It was ambiguous that these options supported the new multiple search base format, as well as the search filters.
* Document entry_cache_autofs_timeoutJakub Hrozek2012-08-101-0/+14
|
* remove duplicate sss_obfuscate reference in seealso manpage sectionNick Guay2012-08-101-3/+0
|
* MAN: Fix minor typo in ldap_search_base sectionStephen Gallagher2012-08-101-1/+1
|
* SRV resolution for backup servers should not be permitted.Michal Zidek2012-08-091-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1463
* Change default for ldap_idmap_range_min to 200000Jakub Hrozek2012-08-091-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1462
* Change default value of ldap_sasl_string to host/hostname@REALM in man page.Michal Zidek2012-08-091-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1464
* Replaced "id_max" & "id_min"Ondrej Kos2012-08-081-4/+4
|
* Fix various typos in documentation.Yuri Chornoivan2012-08-034-5/+5
|