Simo Sorce wrote:
On Thu, 2009-11-05 at 14:46 +1000, David O'Brien wrote:
> The doc skeleton contains the following headings for each of LOCAL,
> LDAP, IPA, and KRB5 providers (4.3 just happens to be for the local SSSD
> domain):
>
> 4.3.1. Identification Options
> text
> 4.3.2. Authentication Options
> text
> 4.3.3. Access Control Options
> text
> 4.3.4. Password Changing Options
> text
>
> I can get a bit of an idea of what goes in here from the wiki and the
> man page, but I'm not sure if that contains examples of all options, and
> neither am I sure I'd get the examples in the right sections.
>
> e.g., from the "DOMAIN SECTIONS" of the man page:
> min_id & max_id I can guess are Identification Options
yes they limit the id range we will consider.
if min_id = 1000 and max_id = 2000 we will filter out any user/group
that does not have the uid/gid within 1000 and 2000
I was across the "what" pretty much, but wondered about the "where" -
ID
vs Auth vs Access Control options
> entry_cache_timeout --> Auth Option
This is more of a general option and tells how long an entry in the
cache is considered valid before you sssd will go an actually refresh it
contacting the remote server.
Currently it is used mostly by the id_provider, but I guess it will be
used also by the access provider.
> timeout ?
which one? :-)
In the Domain Sections of the sssd.conf man page there is an attribute
"timeout" (timeout in secs for this domain). It's more of a general
attribute rather than any of the four listed above.
I'm wondering if splitting out these options into separate sections for
each domain type is the right way to go...
The current TOC for this chapter is attached.
/davide
> I won't go through the whole list... should I just have a go and wait
> for doc review time to shuffle any stuff-ups around?
I think that's the best course of action right now. Things can still
change a bit, but shouldn't change dramatically anyway.
Simo.
--
David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189
http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git
"The most valuable of all talents is that of never using two words when
one will do."
Thomas Jefferson
Chapter 4. Configuring Domains
4.1. Domain Configuration Options
4.2. Valid Options for Proxy Identity Domains
4.3. Configuring the Local SSSD Domain Database Provider
4.3.1. Identification Options
4.3.2. Authentication Options
4.3.3. Access Control Options
4.3.4. Password Changing Options
4.4. Configuring an LDAP Provider
4.4.1. Identification Options
4.4.2. Authentication Options
4.4.3. Access Control Options
4.4.4. Password Changing Options
4.5. Configuring an IPA Provider
4.5.1. Identification Options
4.5.2. Authentication Options
4.5.3. Access Control Options
4.5.4. Password Changing Options
4.6. Configuring a Kerberos 5 Provider
4.6.1. Identification Options
4.6.2. Authentication Options
4.6.3. Access Control Options
4.6.4. Password Changing Options
4.7. Configuring a Proxy Provider
4.7.1. Identification Options
4.7.2. Authentication Options
4.7.3. Access Control Options
4.7.4. Password Changing Options