From ba4378f49914e65a7d687a872d9b938173841154 Mon Sep 17 00:00:00 2001
From: Michal Zidek <mzidek@redhat.com>
Date: Fri, 1 Mar 2013 13:44:03 +0100
Subject: Make the SELinux refresh time configurable.

Option ipa_selinux_refresh is added to basic ipa options.
---
 src/man/sssd-ipa.5.xml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

(limited to 'src/man')

diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index 56220c3e1..8630a5d68 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -316,6 +316,23 @@
                         </para>
                     </listitem>
                 </varlistentry>
+
+                <varlistentry>
+                    <term>ipa_hbac_selinux (integer)</term>
+                    <listitem>
+                        <para>
+                            The amount of time between lookups of the SELinux
+                            maps against the IPA server. This will reduce the
+                            latency and load on the IPA server if there are
+                            many user login requests made in a short
+                            period.
+                        </para>
+                        <para>
+                            Default: 5 (seconds)
+                        </para>
+                    </listitem>
+                </varlistentry>
+
                 <varlistentry>
                     <term>ipa_hbac_treat_deny_as (string)</term>
                     <listitem>
-- 
cgit