From 0249e8d37920f59fd70bdafa4f6706a05ae523c1 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Mon, 17 Jun 2013 09:32:07 +0200
Subject: IPA: Add a server mode option

https://fedorahosted.org/sssd/ticket/1993

SSSD needs to know that it is running on an IPA server and should not
look up trusted users and groups with the help of the extdom plugin
but do the lookups on its own. For this a new boolean configuration
option, is introduced which defaults to false but is set to true during
ipa-server-install or during updates of the FreeIPA server if it is not
already set.
---
 src/man/sssd-ipa.5.xml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

(limited to 'src/man')

diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index a0c2c3460..2eebe70ff 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -457,6 +457,7 @@
                         </para>
                     </listitem>
                 </varlistentry>
+
                 <varlistentry>
                     <term>ipa_hbac_support_srchost (boolean)</term>
                     <listitem>
@@ -475,6 +476,24 @@
                     </listitem>
                 </varlistentry>
 
+                <varlistentry>
+                    <term>ipa_server_mode (boolean)</term>
+                    <listitem>
+                        <para>
+                            This options should only be set by the IPA
+                            installer.
+                        </para>
+                        <para>
+                            The option denotes that the SSSD is running on
+                            IPA server and should perform lookups of users
+                            and groups from trusted domains differently.
+                        </para>
+                        <para>
+                            Default: false
+                        </para>
+                    </listitem>
+                </varlistentry>
+
                 <varlistentry condition="with_autofs">
                     <term>ipa_automount_location (string)</term>
                     <listitem>
-- 
cgit