diff options
| author | Pierre Ossman <pierre@ossman.eu> | 2010-12-22 22:29:03 +0100 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-03-24 14:13:43 -0400 |
| commit | 3612c73e7957721bcbf31d0118e2ac210eb46b88 (patch) | |
| tree | acc174c39c5a854e89c7fafe7a4b513c3027ca6d /src/man/sssd-ldap.5.xml | |
| parent | ff265d170e73d7347c718ee6cf690695bba8caeb (diff) | |
| download | sssd_unused-3612c73e7957721bcbf31d0118e2ac210eb46b88.tar.gz sssd_unused-3612c73e7957721bcbf31d0118e2ac210eb46b88.tar.xz sssd_unused-3612c73e7957721bcbf31d0118e2ac210eb46b88.zip | |
Add host access control support
https://fedorahosted.org/sssd/ticket/746
Diffstat (limited to 'src/man/sssd-ldap.5.xml')
| -rw-r--r-- | src/man/sssd-ldap.5.xml | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index 58665eb4..2a39732b 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -587,6 +587,26 @@ </varlistentry> <varlistentry> + <term>ldap_user_authorized_host (string)</term> + <listitem> + <para> + If access_provider=ldap and + ldap_access_order=host, SSSD will use the presence + of the host attribute in the user's LDAP entry to + determine access privilege. + </para> + <para> + An explicit deny (!host) is resolved first. Second, + SSSD searches for explicit allow (host) and finally + for allow_all (*). + </para> + <para> + Default: host + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>ldap_group_object_class (string)</term> <listitem> <para> @@ -1249,6 +1269,10 @@ ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com access </para> <para> + <emphasis>host</emphasis>: use the host attribute + to determine access + </para> + <para> Default: filter </para> <para> |