diff options
| author | Simo Sorce <ssorce@redhat.com> | 2012-05-23 12:35:44 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-06-06 22:12:22 -0400 |
| commit | f602ad270d06a0dd7f53c4aa6904d27daa07d4ae (patch) | |
| tree | 6e029f602dd44652998064b52f97ec691b5ebc44 /API.txt | |
| parent | f8e7b516d923142a23058cb23ee817522686cfe3 (diff) | |
| download | freeipa-f602ad270d06a0dd7f53c4aa6904d27daa07d4ae.tar.gz freeipa-f602ad270d06a0dd7f53c4aa6904d27daa07d4ae.tar.xz freeipa-f602ad270d06a0dd7f53c4aa6904d27daa07d4ae.zip | |
Add support for disabling KDC writes
Add two global ipaConfig options to disable undesirable writes that have
performance impact.
The "KDC:Disable Last Success" will disable writing back to ldap the last
successful AS Request time (successful kinit)
The "KDC:Disable Lockout" will disable completely writing back lockout
related data. This means lockout policies will stop working.
https://fedorahosted.org/freeipa/ticket/2734
Diffstat (limited to 'API.txt')
| -rw-r--r-- | API.txt | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -459,7 +459,7 @@ option: Bool('ipamigrationenabled', attribute=True, autofill=False, cli_name='en option: Str('ipagroupobjectclasses', attribute=True, autofill=False, cli_name='groupobjectclasses', csv=True, multivalue=True, required=False) option: Str('ipauserobjectclasses', attribute=True, autofill=False, cli_name='userobjectclasses', csv=True, multivalue=True, required=False) option: Int('ipapwdexpadvnotify', attribute=True, autofill=False, cli_name='pwdexpnotify', minvalue=0, multivalue=False, required=False) -option: StrEnum('ipaconfigstring', attribute=True, autofill=False, cli_name='ipaconfigstring', csv=True, multivalue=True, required=False, values=(u'AllowLMhash', u'AllowNThash')) +option: StrEnum('ipaconfigstring', attribute=True, autofill=False, cli_name='ipaconfigstring', csv=True, multivalue=True, required=False, values=(u'AllowLMhash', u'AllowNThash', u'KDC:Disable Last Success', u'KDC:Disable Lockout')) option: Str('ipaselinuxusermaporder', attribute=True, autofill=False, cli_name='ipaselinuxusermaporder', multivalue=False, required=False) option: Str('ipaselinuxusermapdefault', attribute=True, autofill=False, cli_name='ipaselinuxusermapdefault', multivalue=False, required=False) option: Str('setattr*', cli_name='setattr', exclude='webui') |