URL:
https://github.com/SSSD/sssd/pull/530
Title: #530: GPO: Add "thinlinc" to ad_gpo_map_remote_interactive
mzidek-rh commented:
"""
Hello,
I do not think this is a good way to approach this issue. There can be hundreds of
different PAM services that could be mapped to different gpo rules. We do not want to list
them all in man pages and put them as defaults. It would actually worsen the situation
because many admins would not want to use most of the services (I think this is also the
case for thinlinc pam service) and would end up removing them from the defaults using the
'-pam_service_name' syntax in the gpo_map_* options. This is exactly why the
mappings are configurable.
If it was difficult to find out the documentation for gpo_map_* settings then I think the
real issue is that our documentation is not easy to use (and unfortunately I do think this
is the case and we need to improve this). Could you suggest what we could do to improve
the documentation? Was there something specific that was confusing or something that you
would like to add? I really do not know how people use the documentation or how they look
for it (man, google, blog posts?). Your feedback in this area would be valuable.
Thanks,
Michal
"""
See the full comment at
https://github.com/SSSD/sssd/pull/530#issuecomment-371785740