URL: https://github.com/SSSD/sssd/pull/480 Author: jhrozek Title: #480: MAN: Describe the constrains of ipa_server_mode better in the man page Action: synchronized
To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/480/head:pr480 git checkout pr480
From 5cc28b6630b7d446567f680b1ab036258b717bc7 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek <jhro...@redhat.com> Date: Fri, 15 Dec 2017 18:05:13 +0100 Subject: [PATCH] MAN: Describe the constrains of ipa_server_mode better in the man page Resolves: https://pagure.io/SSSD/sssd/issue/3484 Amends the sssd-ipa man page so that we explicitly say that: * SSSD needs to be pointed at the IPA server itself * SSSD currently needs to print fully qualified names for users for trusted domains. --- src/man/sssd-ipa.5.xml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml index d53d0c3c3..0cb2574f8 100644 --- a/src/man/sssd-ipa.5.xml +++ b/src/man/sssd-ipa.5.xml @@ -536,6 +536,29 @@ from trusted domains directly while on a client it will ask an IPA server. </para> + <para> + NOTE: There are currently some assumptions that + must be met when SSSD is running on an IPA server. + <itemizedlist> + <listitem> + <para> + The <quote>ipa_server</quote> option + must be configured to point to the + IPA server itself. This is already + the default set by the IPA installer, + so no manual change is required. + </para> + </listitem> + <listitem> + <para> + The <quote>full_name_format</quote> + option must not be tweaked to only + print short names for users from + trusted domains. + </para> + </listitem> + </itemizedlist> + </para> <para> Default: false </para>
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
