From 5f3142c1e92856531ca8059b082ee9dc4c0af270 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 27 Feb 2013 10:32:40 +0100 Subject: Mention PAC issue with NFS in service plugin doc https://fedorahosted.org/freeipa/ticket/2960 --- ipalib/plugins/service.py | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'ipalib/plugins/service.py') diff --git a/ipalib/plugins/service.py b/ipalib/plugins/service.py index a3d436e6..6b663445 100644 --- a/ipalib/plugins/service.py +++ b/ipalib/plugins/service.py @@ -66,6 +66,11 @@ EXAMPLES: Override a default list of supported PAC types for the service: ipa service-mod HTTP/web.example.com --pac-type=MS-PAC + A typical use case where overriding the PAC type is needed is NFS. + Currently the related code in the Linux kernel can only handle Kerberos + tickets up to a maximal size. Since the PAC data can become quite large it + is recommended to set --pac-type=NONE for NFS services. + Delete an IPA service: ipa service-del HTTP/web.example.com @@ -258,7 +263,8 @@ class service(LDAPObject): cli_name='pac_type', label=_('PAC type'), doc=_("Override default list of supported PAC types." - " Use 'NONE' to disable PAC support for this service"), + " Use 'NONE' to disable PAC support for this service," + " e.g. this might be necessary for NFS services."), values=(u'MS-PAC', u'PAD', u'NONE'), csv=True, ), -- cgit