blob: 3db835dbbd62fe1e596f78e9fcd6f472363f556e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
<refsect1 id='modified-default-options'>
<title>MODIFIED DEFAULT OPTIONS</title>
<para>
Certain option defaults do not match their respective backend
provider defaults, these option names and IPA provider-specific
defaults are listed below:
</para>
<refsect2 id='krb5_modifications'>
<title>KRB5 Provider</title>
<itemizedlist>
<listitem>
<para>
krb5_validate = true
</para>
</listitem>
<listitem>
<para>
krb5_use_fast = try
</para>
</listitem>
<listitem>
<para>
krb5_canonicalize = true
</para>
</listitem>
</itemizedlist>
</refsect2>
<refsect2 id='ldap_general_modifications'>
<title>LDAP Provider - General</title>
<itemizedlist>
<listitem>
<para>
ldap_schema = ipa_v1
</para>
</listitem>
<listitem>
<para>
ldap_force_upper_case_realm = true
</para>
</listitem>
<listitem>
<para>
ldap_sasl_mech = GSSAPI
</para>
</listitem>
<listitem>
<para>
ldap_sasl_minssf = 56
</para>
</listitem>
<listitem>
<para>
ldap_account_expire_policy = ipa
</para>
</listitem>
<listitem>
<para>
ldap_use_tokengroups = true
</para>
</listitem>
</itemizedlist>
</refsect2>
<refsect2 id='ldap_user_modifications'>
<title>LDAP Provider - User options</title>
<itemizedlist>
<listitem>
<para>
ldap_user_member_of = memberOf
</para>
</listitem>
<listitem>
<para>
ldap_user_uuid = ipaUniqueID
</para>
</listitem>
<listitem>
<para>
ldap_user_ssh_public_key = ipaSshPubKey
</para>
</listitem>
<listitem>
<para>
ldap_user_auth_type = ipaUserAuthType
</para>
</listitem>
<listitem>
<para>
ldap_user_certificate = userCertificate;binary
</para>
</listitem>
</itemizedlist>
</refsect2>
<refsect2 id='ldap_group_modifications'>
<title>LDAP Provider - Group options</title>
<itemizedlist>
<listitem>
<para>
ldap_group_object_class = ipaUserGroup
</para>
</listitem>
<listitem>
<para>
ldap_group_object_class_alt = posixGroup
</para>
</listitem>
<listitem>
<para>
ldap_group_member = member
</para>
</listitem>
<listitem>
<para>
ldap_group_uuid = ipaUniqueID
</para>
</listitem>
<listitem>
<para>
ldap_group_objectsid = ipaNTSecurityIdentifier
</para>
</listitem>
<listitem>
<para>
ldap_group_external_member = ipaExternalMember
</para>
</listitem>
</itemizedlist>
</refsect2>
</refsect1>
|
