From 03b859510dc13a13a456ca4aa94c0561a0e9684c Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Wed, 18 Nov 2015 15:29:58 +0100 Subject: AD: Add autofs provider MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://fedorahosted.org/sssd/ticket/1632 Adds the possibility to configure: autofs_provider = ad The AD autofs provider uses the rfc2307 (nis*) attribute maps. This is different (at the moment) from using autofs_provider=ldap with ldap_schema=ad. Reviewed-by: Ondrej Valousek Reviewed-by: Pavel Březina --- src/man/sssd-ad.5.xml | 14 +++++++++++--- src/man/sssd.conf.5.xml | 9 +++++++++ 2 files changed, 20 insertions(+), 3 deletions(-) (limited to 'src/man') diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index 127e96582..d2f74cfce 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -60,9 +60,9 @@ However, it is neither necessary nor recommended to set these - options. The AD provider can also be used as an access, chpass and - sudo provider. No configuration of the access provider is required - on the client side. + options. The AD provider can also be used as an access, chpass, + sudo and autofs provider. No configuration of the access provider + is required on the client side. By default, the AD provider will map UID and GID values from the @@ -928,6 +928,14 @@ ldap_account_expire_policy = ad all the connection parameters (such as LDAP URIs and encryption details) manually. + + When the autofs provider is set to ad, the RFC2307 + schema attribute mapping (nisMap, nisObject, ...) is used, + because these attributes are included the default Active + Directory schema. + + + diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 030485cd7..88a28dd91 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -1959,6 +1959,15 @@ pam_account_expired_message = Account expired, please call help desk. 5 for more information on configuring IPA. + + ad to load maps stored in an AD + server. See + + sssd-ad + 5 + for more information on configuring + the AD provider. + none disables autofs explicitly. -- cgit