On Wed, Jun 01, 2016 at 11:58:45AM +0200, Pavel Březina wrote:
SSIA
From 2101e03fa59fec3f834b48256a287f456662d7c2 Mon Sep 17 00:00:00
2001
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina(a)redhat.com>
Date: Wed, 1 Jun 2016 11:57:53 +0200
Subject: [PATCH] sudo man page: say that we support IPA schema
---
src/man/sssd-sudo.5.xml | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/src/man/sssd-sudo.5.xml b/src/man/sssd-sudo.5.xml
index de276ad2d7647da9b7d510bf00fdf8fb58aed1c7..39376897a26ba8de12536e27a75821529e920bf6
100644
--- a/src/man/sssd-sudo.5.xml
+++ b/src/man/sssd-sudo.5.xml
@@ -111,7 +111,10 @@ ldap_sudo_search_base = ou=sudoers,dc=example,dc=com
<para>
When the SSSD is configured to use IPA as the ID provider,
the sudo provider is automatically enabled. The sudo search base
- is configured to use the compat tree (ou=sudoers,$DC).
+ is configured to use IPA sudo schema at cn=sudo,ou=sudoers,$DC. If
+ any other search base is set manually SSSD will look for rules
+ stored in LDAP sudo schema (e.g. ou=sudoers,$DC generated by
You might want to ping an English speaker to be sure, but I would say
stored using the LDAP sudo schema. I would also put the "..generated by"
after the enclosing bracket.
+ compat plugin).
</para>
</refsect1>
--
2.1.0
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org