On 06/03/2016 05:42 PM, Jakub Hrozek wrote:
On Wed, Jun 01, 2016 at 11:58:45AM +0200, Pavel Březina wrote:
> SSIA
> From 2101e03fa59fec3f834b48256a287f456662d7c2 Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina(a)redhat.com>
> Date: Wed, 1 Jun 2016 11:57:53 +0200
> Subject: [PATCH] sudo man page: say that we support IPA schema
>
> ---
> src/man/sssd-sudo.5.xml | 5 ++++-
> 1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/src/man/sssd-sudo.5.xml b/src/man/sssd-sudo.5.xml
> index
de276ad2d7647da9b7d510bf00fdf8fb58aed1c7..39376897a26ba8de12536e27a75821529e920bf6 100644
> --- a/src/man/sssd-sudo.5.xml
> +++ b/src/man/sssd-sudo.5.xml
> @@ -111,7 +111,10 @@ ldap_sudo_search_base = ou=sudoers,dc=example,dc=com
> <para>
> When the SSSD is configured to use IPA as the ID provider,
> the sudo provider is automatically enabled. The sudo search base
> - is configured to use the compat tree (ou=sudoers,$DC).
> + is configured to use IPA sudo schema at cn=sudo,ou=sudoers,$DC. If
> + any other search base is set manually SSSD will look for rules
> + stored in LDAP sudo schema (e.g. ou=sudoers,$DC generated by
You might want to ping an English speaker to be sure, but I would say
stored using the LDAP sudo schema. I would also put the "..generated by"
after the enclosing bracket.
Hi Dan, can you tell us what's correct here please? Thanks!
> + compat plugin).
> </para>
> </refsect1>