diff options
| author | Pavel Březina <pbrezina@redhat.com> | 2017-10-20 11:49:26 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2017-10-26 10:30:45 +0200 |
| commit | 5c7170c6d602f0bb3208487d860417bde59ab60b (patch) | |
| tree | 6bc2b0b4b09616b544da054522f1001f1b26b697 | |
| parent | 0f44eefe2ce75a0814c8688495477f6c57f3d39a (diff) | |
| download | sssd-5c7170c6d602f0bb3208487d860417bde59ab60b.tar.gz sssd-5c7170c6d602f0bb3208487d860417bde59ab60b.tar.xz sssd-5c7170c6d602f0bb3208487d860417bde59ab60b.zip | |
sudo: document background activity
When we introduced socket activation, we changed the internall behaviour.
Previously we disabled sudo if it was not listed in services, with
socket activation we removed this feature. Some users were confused
so this change documents current behaviour.
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Fabiano Fidêncio <fidencio@redhat.com>
| -rw-r--r-- | src/man/sssd.conf.5.xml | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 47da07c33..6be3cd474 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -2355,6 +2355,14 @@ pam_account_locked_message = Account locked, please contact help desk. <manvolnum>5</manvolnum> </citerefentry>. </para> + <para> + <emphasis>NOTE:</emphasis> Sudo rules are + periodically downloaded in the background unless + the sudo provider is explicitly disabled. Set + <emphasis>sudo_provider = None</emphasis> to + disable all sudo-related activity in SSSD if you do + not want to use sudo with SSSD at all. + </para> </listitem> </varlistentry> <varlistentry> |