[SSSD] [PATCH] extended the documentation of LDAP backend

Sumit Bose sbose at redhat.com
Thu Aug 20 13:42:14 UTC 2009


Hi,

this patch extends the man page of the LDAP backend and added a
configuration example for AD.

bye,
Sumit
-------------- next part --------------
>From fbe41650dcf8c7adc45bea49c6937bff70f74316 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose at redhat.com>
Date: Thu, 20 Aug 2009 15:35:55 +0200
Subject: [PATCH] extended the documentation of LDAP backend

Added man pages sections about user and group attribute mapping.
Added an example configuration to access an AD server.
---
 server/examples/sssd.conf  |   26 ++++++
 server/man/sssd-ldap.5.xml |  189 +++++++++++++++++++++++++++++++++++++++++++-
 2 files changed, 211 insertions(+), 4 deletions(-)

diff --git a/server/examples/sssd.conf b/server/examples/sssd.conf
index d57bed7..90e0c8d 100644
--- a/server/examples/sssd.conf
+++ b/server/examples/sssd.conf
@@ -88,3 +88,29 @@ description = Domains served by SSSD
 ;
 #if a backend is particularly slow you can raise this timeout here
 ; timeout = 60
+
+# Example LDAP domain where the LDAP server is an Active Directory server.
+
+; [domains/AD]
+; description = LDAP domain with AD server
+; enumerate = 0
+; minId = 1000
+;
+; provider = ldap
+; auth-module = ldap
+; ldapUri = ldap://your.ad.server.com
+; userSearchBase = cn=users,dc=example,dc=com
+; groupSearchBase = cn=users,dc=example,dc=com
+; defaultBindDn = cn=Administrator,cn=Users,dc=example,dc=com
+; defaultAuthtokType = password
+; defaultAuthtok = YOUR_PASSWORD
+; userObjectClass = person
+; userName = msSFU30Name
+; userUidNumber = msSFU30UidNumber
+; userGidNumber = msSFU30GidNumber
+; userHomeDirectory = msSFU30HomeDirectory
+; userShell = msSFU30LoginShell
+; userPrincipal = userPrincipalName
+; groupObjectClass = group
+; groupName = msSFU30Name
+; groupGidNumber = msSFU30GidNumber
diff --git a/server/man/sssd-ldap.5.xml b/server/man/sssd-ldap.5.xml
index 385a299..db9b7ad 100644
--- a/server/man/sssd-ldap.5.xml
+++ b/server/man/sssd-ldap.5.xml
@@ -103,7 +103,19 @@
                 </varlistentry>
 
                 <varlistentry>
-                    <term>userNameAttribute (string)</term>
+                    <term>userObjectClass (string)</term>
+                    <listitem>
+                        <para>
+                            The object class of a user entry in LDAP.
+                        </para>
+                        <para>
+                            Default: posixAccount
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userName (string)</term>
                     <listitem>
                         <para>
                             The LDAP attribute that corresponds to
@@ -116,13 +128,182 @@
                 </varlistentry>
 
                 <varlistentry>
-                    <term>userObjectClass (string)</term>
+                    <term>userUidNumber (string)</term>
                     <listitem>
                         <para>
-                            The object class of a user entry in LDAP.
+                            The LDAP attribute that corresponds to
+                            user's id.
                         </para>
                         <para>
-                            Default: posixAccount
+                            Default: uidNumber
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userGidNumber (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that corresponds to
+                            user's primary group id.
+                        </para>
+                        <para>
+                            Default: gidNumber
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userGecos (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that corresponds to
+                            user's gecos field.
+                        </para>
+                        <para>
+                            Default: gecos
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userHomeDirectory (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that contains the name of the
+                            home directory of a user.
+                        </para>
+                        <para>
+                            Default: homeDirectory
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userShell (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that contains the path of the
+                            user's default shell.
+                        </para>
+                        <para>
+                            Default: loginShell
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userUUID (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that contains the UUID/GUID of
+                            a LDAP user object.
+                        </para>
+                        <para>
+                            Default: nsUniqueId
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userPrincipal (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that contains the Kerberos
+                            User Principle Name (UPN) of the user.
+                        </para>
+                        <para>
+                            Default: krbPrincipalName
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userFullname (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that corresponds to
+                            full name of the user.
+                        </para>
+                        <para>
+                            Default: cn
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>userMemberOf (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that list the user's
+                            groupmenberships.
+                        </para>
+                        <para>
+                            Default: memberOf
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>groupObjectClass (string)</term>
+                    <listitem>
+                        <para>
+                            The object class of a group entry in LDAP.
+                        </para>
+                        <para>
+                            Default: posixGroup
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>groupName (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that corresponds to
+                            the group name.
+                        </para>
+                        <para>
+                            Default: cn
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>groupGidNumber (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that corresponds to
+                            group's id.
+                        </para>
+                        <para>
+                            Default: gidNumber
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>groupMember (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that contains the names of
+                            the members of the group.
+                        </para>
+                        <para>
+                            Default: memberuid
+                        </para>
+                    </listitem>
+                </varlistentry>
+
+                <varlistentry>
+                    <term>groupUUID (string)</term>
+                    <listitem>
+                        <para>
+                            The LDAP attribute that contains the UUID/GUID of
+                            a LDAP group object.
+                        </para>
+                        <para>
+                            Default: nsUniqueId
                         </para>
                     </listitem>
                 </varlistentry>
-- 
1.6.2.5



More information about the sssd-devel mailing list