On Mon, Nov 30, 2015 at 05:01:53AM -0500, Dan Lavu wrote:
Fixed some grammatical errors and wording. Also noticed the line about supported AD
versions, please correct me if I'm wrong, but we only officially support 2008R2 and
2012R2 so I modified that line stating that.
----- Original Message -----
From: "Pavel Březina" <pbrezina(a)redhat.com>
Sent: Monday, November 30, 2015 4:36:10 AM
Subject: [SSSD]Re: [PATCH] MAN: Clarify that subdomains always use service discovery
On 11/26/2015 05:10 PM, Jakub Hrozek wrote:
> attached is a simple manpage patch for #2881.
sssd-devel mailing list
From 3cb1cd429c59e380a264d13d4299f76e10238799 Mon Sep 17 00:00:00
From: Dan Lavu <dlavu(a)redhat.com>
Date: Mon, 30 Nov 2015 04:51:00 -0500
Subject: [PATCH] Clarify that subdomains always use service discovery
src/man/sssd-ad.5.xml | 16 ++++++++++++----
1 file changed, 12 insertions(+), 4 deletions(-)
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
@@ -39,12 +39,13 @@
The AD provider supports connecting to Active Directory 2008 R2
- or later. Earlier versions may work, but are unsupported.
+ and 2012 R2. Other versions may work, but are unsupported.
I don't think we want to do this change. I know you're coming from your
downstream perspective where I would agree, but in upstream, we should
support also 2016 when it comes out and 2012.0 (as opposed to R2).
- The AD provider is able to provide identity information and
- authentication for entities from trusted domains as well. Currently
- only trusted domains in the same forest are recognized.
+ The AD provider can be used to get user information
+ and authenticate users from trusted domains. Currently
+ only trusted domains in the same forest are recognized. In
+ addition servers from trusted domains are always auto-discovered.
The AD provider accepts the same options used by the
@@ -121,10 +122,17 @@ ldap_id_mapping = False
connect in order of preference. For more
information on failover and server redundancy, see
the <quote>FAILOVER</quote> section.
This is optional if autodiscovery is enabled.
For more information on service discovery, refer
to the <quote>SERVICE DISCOVERY</quote>
+ Note: Trusted domains will always auto-discover
+ servers even if the primary server is explicitly
+ defined in the ad_server option.
I agree with the rest of the changes and if you agree with dropping the
first hunk, I'll push the patch.