sssd.git/src/man, branch sudo

ldap: Change ldap_user_certificate to userCertificate;binary

2017-10-04T06:54:41+00:00

IPA and AD providers default to userCertificate;binary for the
ldap_user_certificate option. It will be good to default that value
also for the generic LDAP provider.

Resolves:
https://pagure.io/SSSD/sssd/issue/3499

Reviewed-by: Jakub Hrozek

SSSCTL: Replace sss_debuglevel with shell wrapper

2017-09-25T19:50:32+00:00

The sss_debuglevel binary is replaced by a shell wrapper calling
sssctl debug-level as part of merging sss_debuglevel into sssctl.
The wrapper will redirect sss_debuglevel to the sssctl debug-level
command performing the same task. The sss_debuglevel(8) man page is
updated to indicate that sss_debuglevel is deprecated and functionality
exists now in sssctl.

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Michal Židek

MAN: Add a note about the output of all commands when using domain_resolution_order

2017-09-14T15:18:01+00:00

As the output of all commands when using domain_resolution_order is
fully-qualified, even when using shortnames, let's add a note in the man
page to make it explicit. Also, let's suggest a possible workaround for
this having the output non fully-qualified and also mention the problems
that the possible workaround may cause.

Resolves: https://pagure.io/SSSD/sssd/issue/3513

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek

MAN: Improve ipa_hostname description

2017-09-13T19:02:15+00:00

The description of ipa_hostname config option doesn't mention it must be
fully-qualified, although when using a  non-fully qualified name IPA
server may behave weirdly. Thus, let's add this info the the man page.

Related: https://pagure.io/SSSD/sssd/issue/1946

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

MAN: Add sssd-systemtap man page

2017-09-08T14:09:53+00:00

Provide information for administrators and users to utilize
SSSD systemtap infrastructure.

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

MAN: Document that the secrets provider can only be specified in a per-client section

2017-09-06T06:04:44+00:00

Resolves:
https://pagure.io/SSSD/sssd/issue/3417

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Justin Stephenson

MAN: Improve failover documentation by explaining the timeout better

2017-09-05T15:52:08+00:00

Reviewed-by: Pavel Březina

MAN: Improve description of 'trusted domain section' in sssd.conf's man page

2017-09-05T09:17:41+00:00

PR generated to include explaination for ipa ad trust sssd configuration
where ad has a child domain. Explanation is added to 'TRUSTED DOMAIN
SECTION'. Also an example is included to better understanding.

Resolves: https://pagure.io/SSSD/sssd/issue/3399

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Jakub Hrozek

SECRETS: Support 0 as unlimited for the quotas

2017-09-01T18:27:01+00:00

Add a special value for all the quota-like settings that means 'no
limit'.

Because the responder also had a global limit on the size of the
accepted body (64kiB), this patch also removes the hardcoded limit and
instead keep track of the biggest quota value on startup.

Reviewed-by: Simo Sorce 
Reviewed-by: Fabiano Fidêncio

SECRETS: Add a new option to control per-UID limits

2017-09-01T18:26:45+00:00

Adds a new option max_uid_secrets that allows to set a limit of secrets
for this particular client so that the user cannot starve other users.

Resolves:
https://pagure.io/SSSD/sssd/issue/3363

Reviewed-by: Simo Sorce 
Reviewed-by: Fabiano Fidêncio