-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 09/25/2009 09:09 AM, Sumit Bose wrote:
Hi,
this patch to the sssd-krb5 man page should clarify how the krb5
provider will find the right UPN.
This hopefully fixes #204.
Please fell free to correct any grammar or spelling mistakes.
bye,
Sumit
------------------------------------------------------------------------
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel
Just a few minor nitpicks.
1) Please rebase atop the current master.
I'd rewrite the following paragraph:
The Kerberos 5 authentication backend does not contain an identity
provider. But some useful information can only be delivered by an
identity provider, e.g. the User's Principle Name (UPN). If the
identity provider knows the UPN, e.g. this is the case in Active
Directory or FreeIPA domains, it can be saved in
<command>sssd's</command> internal cache and used by the Kerberos 5
authentication backend. Please refer to the man page of the used
identity provider to see how to configure this.
as
The Kerberos 5 authentication backend does not contain an identity
provider and must be paired with one in order to function properly (for
example, id_provider = ldap). Some information required by the Kerberos
5 authentication backend must be provider by the identity provider, such
as the user's Kerberos Principal Name (UPN). The configuration of the
identity provider should have an entry to specify the UPN. Please refer
to the man page for the applicable identity provider for details on how
to configure this.
Under krb5try_simple_upn, please change "an User Principal Name" to "a
User Principal Name". I'd also recommend that the last sentence read:
"In this case, SSSD will construct a UPN using the format
<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>"
- --
Stephen Gallagher
RHCE 804006346421761
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkq8yFsACgkQeiVVYja6o6PWIACgrxOwrPZkSx3WQ4t/ofWojZkA
AAcAoIFi5+PvcZTz6Ws9XmVaLszcBc9B
=1p3k
-----END PGP SIGNATURE-----