On Wed, Sep 11, 2013 at 10:51:46AM +0200, Pavel Březina wrote:
On 09/10/2013 04:34 PM, Jakub Hrozek wrote:
>On Tue, Sep 10, 2013 at 09:47:17AM +0200, Ondrej Kos wrote:
>>Hi,
>>
>>Attached patch resolves the issue
https://fedorahosted.org/sssd/ticket/1187
>
>I think the man page looks good now. I would like to ACK and push the
>patch as-is, but I'd like to have kind of a last call if any other
>developer would prefer to move the options to an "Advanced" section.
>
>The remaining options that are shared with the krb5 provider have different
>defaults or meaning than in the traditional krb5 provider.
I don't think there is any reason to use those options, unless a
very specific needs. So feel free to remove them.
OK. I will push this patch as soon as we branch off sssd-1-11 from
master (all these changes are targeted for 1.12)
But this made me thinking, maybe we can move all attribute options
to a separate manual page. Those options are not normally needed
(especially since we added ad provider), but shadows configuration
options, since user looking for a specific option has to go through
all attribute options as well. And there is *a lot* of them.
I was thinking about this as well, but actually for pure LDAP provider,
the options are often useful, there is still a lot of people around who
use LDAP provide with AD and map attributes to SFU aliases. So I think
we should move the options to their own section in the sssd-ldap man
page so that the options that fine-tune the behaviour are more visible
and nicely grouped.