sssd.git/src/man, branch sssctl

MAN: GPO Security Filtering limitation

2017-10-27T14:22:46+00:00

Note in the man pages that current version of SSSD does not support
host entries in the 'Security filtering' list.

Resolves:
https://pagure.io/SSSD/sssd/issue/3444

Reviewed-by: Fabiano Fidêncio

sudo: document background activity

2017-10-26T08:30:45+00:00

When we introduced socket activation, we changed the internall behaviour.
Previously we disabled sudo if it was not listed in services, with
socket activation we removed this feature. Some users were confused
so this change documents current behaviour.

Reviewed-by: Jakub Hrozek 
Reviewed-by: Fabiano Fidêncio

CONFIG: Add a new option auto_private_groups

2017-10-26T08:10:49+00:00

The auto_private_groups option is used to configure the domain->mpg flag
which was already set automatically for subdomains, but for some time was
not settable by the admin via the configuration file.

The new option name, instead of the old magic_private_groups, was chosen
purely because this name would hopefully be better understood by admins.

The option doesn't do anything yet, it is just added to all the places a
new option should be added to.

Related:
    https://pagure.io/SSSD/sssd/issue/1872

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina

Fix minor spelling mistakes

2017-10-25T08:24:49+00:00

Merges: https://pagure.io/SSSD/sssd/pull-request/3556

Reviewed-by: Lukáš Slebodník

MAN: Document memcache_timeout=0 meaning

2017-10-24T13:13:33+00:00

Document that by setting memcache_timeout to 0 the in-memoory cache
will be disabled.

Related:
https://pagure.io/SSSD/sssd/issue/3496

Reviewed-by: Sumit Bose 
Reviewed-by: Pavel Březina 
Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

Updating the translation for the 1.16.0 release

2017-10-20T14:37:04+00:00

LDAP: Add support for rhost access control

2017-10-19T14:05:06+00:00

This patch implements verification of pam_rhost against
rules stored in LDAP entry of a user.

Reviewed-by: Jakub Hrozek 
Reviewed-by: Pavel Březina

IPA: Add threshold for sudo searches

2017-10-19T11:36:26+00:00

Apply the sudo threshold to IPA provider sudo command and command
group searches to prevent SSSD from creating large search filters.

The IPA sudo threshold value will utilize the sudo responder
sudo_threshold value. If the threshold is exceeded, a basic search
filter will be used as a fallback to retrieve all IPA sudo commands or
command groups.

Resolves:
https://pagure.io/SSSD/sssd/issue/3507

Reviewed-by: Pavel Březina

ldap: Change ldap_user_certificate to userCertificate;binary

2017-10-04T06:54:41+00:00

IPA and AD providers default to userCertificate;binary for the
ldap_user_certificate option. It will be good to default that value
also for the generic LDAP provider.

Resolves:
https://pagure.io/SSSD/sssd/issue/3499

Reviewed-by: Jakub Hrozek

SSSCTL: Replace sss_debuglevel with shell wrapper

2017-09-25T19:50:32+00:00

The sss_debuglevel binary is replaced by a shell wrapper calling
sssctl debug-level as part of merging sss_debuglevel into sssctl.
The wrapper will redirect sss_debuglevel to the sssctl debug-level
command performing the same task. The sss_debuglevel(8) man page is
updated to indicate that sss_debuglevel is deprecated and functionality
exists now in sssctl.

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Michal Židek