From 6fb75e297bf7fc83e3db1f5ae8560624656ef319 Mon Sep 17 00:00:00 2001
From: Jan Zeleny <jzeleny@redhat.com>
Date: Fri, 4 Nov 2011 13:16:47 -0400
Subject: Add ipa_hbac_support_srchost option to IPA provider

don't fetch all host groups if this option is false
https://fedorahosted.org/sssd/ticket/1078
---
 src/man/sssd-ipa.5.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'src/man/sssd-ipa.5.xml')

diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index 32d691d7..d85ae86c 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -237,6 +237,18 @@
                         </para>
                     </listitem>
                 </varlistentry>
+                <varlistentry>
+                    <term>ipa_hbac_support_srchost (boolean)</term>
+                    <listitem>
+                        <para>
+                            If this is set to false, then srchost as given
+                            to SSSD by PAM will be ignored.
+                        </para>
+                        <para>
+                            Default: false
+                        </para>
+                    </listitem>
+                </varlistentry>
 
                 <varlistentry>
                     <term>ipa_netgroup_member_of (string)</term>
-- 
cgit