summaryrefslogtreecommitdiffstats
path: root/src/man
Commit message (Collapse)AuthorAgeFilesLines
* ldap: Fallback option for rfc2307 schemaSimo Sorce2013-03-201-0/+31
| | | | | | | | | | | Add option to fallback to fetch local users if rfc2307is being used. This is useful for cases where people added local users as LDAP members and rely on these group memberships to be maintained on the local host. Disabled by default as it violates identity domain separation. Ticket: https://fedorahosted.org/sssd/ticket/1020
* Make the SELinux refresh time configurable.Michal Zidek2013-03-191-0/+17
| | | | Option ipa_selinux_refresh is added to basic ipa options.
* Decrease krb5_auth_timeout defaultOndrej Kos2013-03-181-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1738
* Remove enumerate=true from man sssd-ldapJakub Hrozek2013-02-261-1/+0
| | | | https://fedorahosted.org/sssd/ticket/1737
* NSS: Add original homedir to home directory template optionsStephen Gallagher2013-02-101-0/+7
| | | | https://fedorahosted.org/sssd/ticket/1805
* Correct sss_ssh_knowhostsproxy typo in man pagesJohn Hodrien2013-02-011-1/+1
|
* MAN: Clarify that saving users after enumerating large domain might be CPU ↵Jakub Hrozek2013-01-281-1/+9
| | | | | | intensive https://fedorahosted.org/sssd/ticket/1732
* try primary server after retry_timeout + 1 seconds when switching to backupPavel Březina2012-12-181-1/+1
| | | | | | | | | | | | | | https://fedorahosted.org/sssd/ticket/1679 The problem is when we are about to reset the server status, we don't get through the timeout (30 seconds) because the "switch to primary server" task is scheduled 30 seconds after fall back to a backup server. Thus the server status remains "not working" and is resetted after another 30 seconds. We need to make sure that the server status is tried after the timeout period. retry_timeout is currently hardcoded to 30, thus the change in man page.
* MAN: Fix the title of sssd-sudoJakub Hrozek2012-12-131-1/+1
| | | | https://fedorahosted.org/sssd/ticket/1710
* sudo manpage: clarify that sudoHost may contain wildcards and not regular ↵Pavel Březina2012-12-112-2/+2
| | | | | | expression https://fedorahosted.org/sssd/ticket/1690
* MAN: Move ssh_known_hosts_timeout documentation to the correct sectionJan Cholasta2012-12-051-12/+12
|
* LDAP: Make it possible to use full principal in ldap_sasl_authid againJakub Hrozek2012-11-191-0/+5
|
* MAN: document the ldap_sasl_realm optionJakub Hrozek2012-11-191-0/+13
| | | | The option was completely undocumented.
* MAN: quotation fixOndrej Kos2012-11-161-1/+1
| | | | | I noticed that the proxy in auth_provider section of sssd.conf manpage isn't quoted when all others are.
* Add ignore_group_members option.Paul B. Henson2012-11-151-0/+17
| | | | https://fedorahosted.org/sssd/ticket/1376
* Run IPA subdomain provider if IPA ID provider is configuredSumit Bose2012-11-142-5/+32
| | | | | | | | | | | | | | | | | | | | | | | | To make configuration easier the IPA subdomain provider should be always loaded if the IPA ID provider is configured and the subdomain provider is not explicitly disabled. But to avoid the overhead of regular subdomain requests in setups where no subdomains are used the IPA subdomain provider should behave differently if configured explicit or implicit. If the IPA subdomain provider is configured explicitly, i.e. 'subdomains_provider = ipa' can be found in the domain section of sssd.conf subdomain request are always send to the server if needed. If it is configured implicitly and a request to the server fails with an indication that the server currently does not support subdomains at all, e.g. is not configured to handle trust relationships, a new request will be only send to the server after a long timeout or after a going-online event. To be able to make this distinction this patch save the configuration status to the subdomain context. Fixes https://fedorahosted.org/sssd/ticket/1613
* Always start PAC responder if IPA ID provider is configuredSumit Bose2012-11-141-0/+6
| | | | | | | | Since the PAC responder is used during the authentication of users from trusted realms it is started automatically if the IPA ID provider is configured for a domain to simplify the configuration. Fixes https://fedorahosted.org/sssd/ticket/1613
* MAN: Fix validation error caused by bad 'ca' translationStephen Gallagher2012-11-081-2/+2
|
* MAN: sssd-simple - suggest awarness of empty rulesOndrej Kos2012-11-081-0/+5
| | | | | Admins should be aware of the behavior of simple access provider when empty lists are configured (may be result of scripted filing)
* MAN: Specify the correct location for the force_timeout optionStephen Gallagher2012-11-081-16/+32
|
* Allow setting the default_shell option per-domain as wellJakub Hrozek2012-10-182-2/+4
| | | | https://fedorahosted.org/sssd/ticket/1583
* Make TTL configurable for dynamic dns updatesJames Hogarth2012-10-161-0/+14
|
* Updating the translations for the 1.9.2 releasesssd-1_9_2Jakub Hrozek2012-10-1213-2026/+2893
|
* MAN: improve wording of default_domain parameterJakub Hrozek2012-10-121-5/+5
|
* Fix language errors in the sssd-krb5.conf man pageE Deon Lackey2012-10-111-70/+71
|
* Add more info about ticket validationOndrej Kos2012-10-101-1/+7
| | | | | | | | | https://fedorahosted.org/sssd/ticket/1499 Adds log message about not finding appropriate entry in keytab and using the last keytab entry when validation is enabled. Adds more information about validation into manpage.
* Fix typosYuri Chornoivan2012-10-091-1/+1
|
* Updating the translations for 1.9.1 releasesssd-1_9_1Jakub Hrozek2012-10-0513-10238/+12658
|
* man: Note that automounter must be restarted to re-read the master mapJakub Hrozek2012-10-055-0/+10
| | | | https://fedorahosted.org/sssd/ticket/1563
* manpage: ldap_access_filter is not always mandatoryPavel Březina2012-10-051-5/+7
| | | | https://fedorahosted.org/sssd/ticket/1540
* SSH: Expire hosts in known_hostsJan Cholasta2012-10-051-0/+12
|
* Fix default upper limit of slicesOndrej Kos2012-10-041-1/+1
| | | | | | | https://fedorahosted.org/sssd/ticket/1537 changes upper limit of slices to 2000200000 in providers code and manpage.
* Note that Range Retrieval is not supported when filter is used in the search ↵Jakub Hrozek2012-10-032-2/+14
| | | | | | base. https://fedorahosted.org/sssd/ticket/1471
* sss_seed: Passwords longer then PASS_MAX not allowed.Michal Zidek2012-10-031-0/+12
| | | | | | | | sss_seed fails if password file specified with -p or --password-file option contains password longer than PASS_MAX. Man pages inform about PASS_MAX limitation.
* Include param_help_py.xml in the list of po4a sourcesJakub Hrozek2012-10-021-0/+1
|
* Flip the default value of ldap_initgroups_use_matching_rule_in_chainJakub Hrozek2012-10-021-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1535
* Add man page section about provider specific re_expressionSumit Bose2012-10-021-8/+33
| | | | Fixes: https://fedorahosted.org/sssd/ticket/1525
* sudo and autofs search bases should not be marked experimentalJakub Hrozek2012-10-011-2/+2
| | | | https://fedorahosted.org/sssd/ticket/1541
* Change option to display help message in man pages.Michal Zidek2012-10-013-2/+12
| | | | | | | POPT_AUTOHELP generates -? and --help options and not -h to display help message. https://fedorahosted.org/sssd/ticket/1546
* Document ldap_chpass_update_last_changeJakub Hrozek2012-10-011-0/+15
| | | | | | Add the option to the manual page and the configAPI https://fedorahosted.org/sssd/ticket/1494
* Add new option default_domain_suffixSumit Bose2012-10-011-0/+24
|
* sssd-ldap manpage: ldap_scheme formattingOndrej Kos2012-09-261-6/+26
| | | | | | fixes https://fedorahosted.org/sssd/ticket/1483 ldap schemes now displayed as bullet list
* Updating translations for the 1.9.0 releasesssd-1_9_0Jakub Hrozek2012-09-2413-3837/+3931
|
* autofs, sudo, ssh and PAC are not experimental anymoreJakub Hrozek2012-09-244-29/+0
|
* Updating the translations for the 1.9.0 RC1 releasesssd-1_9_0_rc1sssd-1_8_98Jakub Hrozek2012-09-1311-24/+94
|
* Update translations for 1.9.0 beta 7 releasesssd-1_9_0_beta7sssd-1_8_97Jakub Hrozek2012-09-0514-6534/+13778
|
* MAN: Improve description of ldap_*_search_base optionsStephen Gallagher2012-08-104-96/+63
| | | | | It was ambiguous that these options supported the new multiple search base format, as well as the search filters.
* Document entry_cache_autofs_timeoutJakub Hrozek2012-08-101-0/+14
|
* remove duplicate sss_obfuscate reference in seealso manpage sectionNick Guay2012-08-101-3/+0
|
* MAN: Fix minor typo in ldap_search_base sectionStephen Gallagher2012-08-101-1/+1
|