Hi,
while documenting the security options I realized man sssd.conf doesn't
include the krb5 and proxy access control modules. I hope I worded the
sentence about krb5 correctly.
>From 9c8ce997e738c537061d53c5499ad0d0417c012e Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhro...@redhat.com>
Date: Wed, 30 Sep 2015 04:25:54 +0200
Subject: [PATCH] MAN: proxy and krb5 are valid access control modules
---
src/man/sssd.conf.5.xml | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index
9701f2a15fd67c799e199a99049bdcf259fdc254..0ab4381819fa2f47e9a4bfb4897cb94144b96ff8
100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -1716,6 +1716,16 @@ pam_account_expired_message = Account expired, please
call help desk.
information on configuring the simple access
module.
</para>
<para>
+ <quote>krb5</quote>: .k5login based access control.
+ See <citerefentry>
+ <refentrytitle>sssd-krb5</refentrytitle>
+ <manvolnum>5</manvolnum></citerefentry> for more
+ information on configuring Kerberos.
+ </para>
+ <para>
+ <quote>proxy</quote> for relaying access control
to another PAM module.
+ </para>
+ <para>
Default: <quote>permit</quote>
</para>
</listitem>
--
2.4.3
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
