diff options
| author | Pavel Reichl <preichl@redhat.com> | 2014-09-25 14:52:31 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-09-29 18:27:07 +0200 |
| commit | 830ded27453015080a54d6ba85fd4999ee7e9af1 (patch) | |
| tree | 2dcdecd4d211c25e7e1dd909e062e534348227db /src/config/etc/sssd.api.conf | |
| parent | cb7644495e76ffa3e19ba10efb4a0f5f3817ba33 (diff) | |
| download | sssd-830ded27453015080a54d6ba85fd4999ee7e9af1.tar.gz sssd-830ded27453015080a54d6ba85fd4999ee7e9af1.tar.xz sssd-830ded27453015080a54d6ba85fd4999ee7e9af1.zip | |
PAM: new options pam_trusted_users & pam_public_domains
pam_public_domains option is a list of numerical UIDs or user names
that are trusted.
pam_public_domains option is a list of domains accessible even for
untrusted users.
Based on:
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Diffstat (limited to 'src/config/etc/sssd.api.conf')
| -rw-r--r-- | src/config/etc/sssd.api.conf | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/config/etc/sssd.api.conf b/src/config/etc/sssd.api.conf index 52629ded4..c47ce348c 100644 --- a/src/config/etc/sssd.api.conf +++ b/src/config/etc/sssd.api.conf @@ -55,6 +55,8 @@ pam_verbosity = int, None, false pam_id_timeout = int, None, false pam_pwd_expiration_warning = int, None, false get_domains_timeout = int, None, false +pam_trusted_users = str, None, false +pam_public_domains = str, None, false [sudo] # sudo service |