[SSSD] Updates of sssd-ldap man page

Jan Zelený jzeleny at redhat.com
Fri Aug 20 08:57:48 UTC 2010


Hello everybody,
I've done review of sssd-ldap. Since I'm new here, I'd like to post my findings 
here and consult them before I start posting patches to documentation.

The review is related to Ticket #601. Besides issue described in there I found 
several other missing config options and some other inconsistencies:

ldap_schema is missing supported values AD and IPA, which seem to have the 
same behavior as RFC2307bis. It would be good to at least mention this and 
maybe a plan for future.

ldap_search_timeout is missing, but it is present in sssd 1.2.2. It seems it 
is still used, so I'd like to know what is the plan here (if I should at least 
put a note about it in documentation or not).

ldap_network_timeout and ldap_opt_timeout have both default values 6, not 5.

ldap_access_filter - is ldap even supported as access provider? I tried to find 
this out for couple hours and it doesn't seem like it. But it is possible I 
just don't see this in the code. If ldap isn't supported as access provider, 
I'll mention it in the man page.


Then there are some directives, which are missing in the documentation and 
they seem to be recognized by sssd. Please correct me if I've put in this list 
directives which aren't recognized and therefore shouldn't be documented.

ldap_search_timeout
ldap_user_search_scope
ldap_user_search_filter
ldap_group_search_scope
ldap_group_search_filter
ldap_offline_timeout
ldap_purge_cache_timeout
entry_cache_timeout
account_cache_expiration

ldap_entry_usn
ldap_rootdse_last_usn

ldap_user_pwd
ldap_user_modify_timestamp
ldap_user_shadow_last_change
ldap_user_shadow_min
ldap_user_shadow_max
ldap_user_shadow_warning
ldap_user_shadow_inactive
ldap_user_shadow_expire
ldap_user_shadow_flag
ldap_user_krb_last_pwd_change
ldap_user_krb_password_expiration
ldap_pwd_attribute

ldap_group_pwd
ldap_group_modify_timestamp

--
Jan



More information about the sssd-devel mailing list