From 5f879ab8b6c1cefbc63e1c2303f79b09b6246ca3 Mon Sep 17 00:00:00 2001 From: Stephen Gallagher Date: Thu, 19 Jul 2012 14:42:41 -0400 Subject: MAN: Improvements to the AD provider manpage Add information about ID mapping (including how to disable it) as well as information on how to handle homedir and shell. https://fedorahosted.org/sssd/ticket/1433 --- src/man/sssd-ad.5.xml | 98 +++++++++++++++++++++++++++++++++++++++++++++++++ src/man/sssd.conf.5.xml | 16 ++++++++ 2 files changed, 114 insertions(+) diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index 46660b306..f9ef0f3d6 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -59,6 +59,16 @@ provider. No configuration of the access provider is required on the client side. + + By default, the AD provider will map UID and GID values from the + objectSID parameter in Active Directory. For details on this, see + the ID MAPPING section below. If you want to + disable ID mapping and instead rely on POSIX attributes defined in + Active Directory, you should set + +ldap_id_mapping = False + + @@ -118,6 +128,92 @@ + + override_homedir (string) + + + Override the user's home directory. You + can either provide an absolute value or a + template. In the template, the following + sequences are substituted: + + + %u + login name + + + %U + UID number + + + %d + domain name + + + %f + fully qualified user name (user@domain) + + + %% + a literal '%' + + + + + + This option can also be set per-domain. + + + example: + +override_homedir = /home/%u + + + + Default: Not set (SSSD will use the value + retrieved from LDAP) + + + + + fallback_homedir (string) + + + Set a default template for a user's home directory + if one is not specified explicitly by the domain's + data provider. + + + The available values for this option are the same + as for override_homedir. + + + example: + +fallback_homedir = /home/%u + + + + Default: not set (no substitution for unset home + directories) + + + + + default_shell + + + The default shell to use if the provider does not + return one during lookup. This option supersedes + any other shell options if it takes effect. + + + Default: not set (Return NULL if no shell is + specified and rely on libc to substitute something + sensible when necessary, usually /bin/sh) + + + @@ -126,6 +222,8 @@ + + EXAMPLE diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index dbacf7aaa..26f05eae6 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -449,6 +449,16 @@ This option can also be set per-domain. + + example: + +override_homedir = /home/%u + + + + Default: Not set (SSSD will use the value + retrieved from LDAP) + @@ -463,6 +473,12 @@ The available values for this option are the same as for override_homedir. + + example: + +override_homedir = /home/%u + + Default: not set (no substitution for unset home directories) -- cgit