sssd.git/src/man, branch certificate_mapping

Updating the translations for the 1.15.0 release

2017-01-25T15:35:39+00:00

RESPONDER: Shutdown {dbus,socket}-activated responders in case they're idle

2017-01-23T17:46:37+00:00

This commit introduces a new option for the responders called
responder_idle_timeout, which specifies the number of seconds that the
responder process can be up without being used. The default value is
300 seconds (5 minutes) and can be configured per responder, being 60
seconds the minimum acceptable value.

Is important to note that setting "responder_idle_timeout = 0" disables
the responder timeout, which makes sense for the responders that always
will be running.

The shutdown timeout is activated per responder in case the responder
has been {dbus,socket}-activated. In case of any commnunication with the
responder the timeout is reset thereby ensuring we won't shutdown a
responder that is not idle.

Setting the responder's last request time is done slightly differently
for socket-activated and dbus-activated responders. In both cases it's
updated in any internal communication in sbus_message_handler(), but
for the socket-activated responders it's also updated when the
responder's socket is used.

Currently it works properly with all responders but the secrets one,
which has a different logic and must be treated separately in case some
change is required there.

Is worth to mention that this commit does not affect the responders
explicitly configured in the "services" line of sssd.conf.

Related:
https://fedorahosted.org/sssd/ticket/3245

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

MAN: "user" doesn't work with socket-activated services

2017-01-23T17:46:37+00:00

Make it clear in the manual that the "user" option is not going to work
with socket-activated services and also mention what's the best way to
change it in case it's needed, being clear about what can go wrong in
case the admin decides to do it.

Related:
https://fedorahosted.org/sssd/ticket/2243

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

MAN: Mention that the services' list is optional

2017-01-23T17:46:37+00:00

For platforms where systemd is supported, after making the responders
socket-activatable, the services' list is completely optional. So, let's
mention that in the manual page for sssd.conf, including instructions on
how to enabled the desired services.

Related:
https://fedorahosted.org/sssd/ticket/2243

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

MAN: sssctl debug level

2017-01-13T19:35:19+00:00

Use tools specific reference to debug level explanation in sssctl
man page.

Resolves:
https://fedorahosted.org/sssd/ticket/3085

Reviewed-by: Lukáš Slebodník

MAN: Updation of sssd-ad man page for case when dyndns_refresh_interval < 60 seconds

2017-01-06T10:48:16+00:00

Changes for dyndns_refresh_interval < 60 sec

man sss-ad changed for dyndns_refresh_interval < 60 sec

Resolves:
https://fedorahosted.org/sssd/ticket/2201

Reviewed-by: Pavel Březina

SECRETS: Add configurable payload size limit of a secret

2016-11-24T08:55:45+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/3169

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

MAN: Document different defaults for IPA provider

2016-11-15T10:50:50+00:00

Update man pages for any IPA provider config options that differ from
ldap/krb5 provider back-end defaults

Resolves:
https://fedorahosted.org/sssd/ticket/3214

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

MAN: Document different defaults for AD provider

2016-11-15T10:50:43+00:00

Update man pages for any AD provider config options that differ from
ldap/krb5 provider back-end defaults

Resolves:
https://fedorahosted.org/sssd/ticket/3214

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

ad_access_filter search for nested groups

2016-11-03T10:26:33+00:00

Includes instructions and example for AD nested group access

Related to https://fedorahosted.org/sssd/ticket/3218

Signed-off-by: Mike Ely 

Reviewed-by: Sumit Bose