[SSSD] [PATCH] Minor man page patches

Jakub Hrozek jhrozek at redhat.com
Wed Jul 17 11:54:04 UTC 2013


Hi,

attached are three man page patches.

[PATCH 1/3] MAN: clarify the default access provider for AD
https://fedorahosted.org/sssd/ticket/1965

After we added a section that clarified what access_provider=ad did,
some users were confused and thought that "ad" was also the default
access provider if "id_provider=ad" was specified.

[PATCH 2/3] MAN: IP addresss does not work when used for ad_server
https://fedorahosted.org/sssd/ticket/1998

Currently using IP address as value of ad_server is not supported, so
the man pages should not mention that as an option.

[PATCH 3/3] MAN: Clarify the min_id/max_id limits further
https://fedorahosted.org/sssd/ticket/2005

Some users were confused by our description of min_id/max_id and thought
the limits only applied to returning entries from the NSS responder.
However, the limits are actually enforced on the back end side, so the
entries are not even saved to cache.
-------------- next part --------------
>From 1facb0cd409499a6aeb61be7080cd3cf88594383 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Fri, 12 Jul 2013 16:41:49 +0200
Subject: [PATCH 1/3] MAN: clarify the default access provider for AD

https://fedorahosted.org/sssd/ticket/1965

After we added a section that clarified what access_provider=ad did,
some users were confused and thought that "ad" was also the default
access provider if "id_provider=ad" was specified.
---
 src/man/sssd-ad.5.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index b252d9394055cbd9a7e1a8b08ab81624362e13c9..fef7a2d827118dec9c4dcba6cb2ece82daba4a86 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -319,6 +319,11 @@ ldap_access_order = expire
 ldap_account_expire_policy = ad
 </programlisting>
         </para>
+        <para>
+            However, unless the <quote>ad</quote> access control provider
+            is explicitly configured, the default access provider is
+            <quote>permit</quote>.
+        </para>
     </refsect1>
 
 	<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />
-- 
1.8.3.1

-------------- next part --------------
>From 6ff9a188fb1b4c6d0be39f872453b02b1316de9c Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Fri, 12 Jul 2013 16:44:39 +0200
Subject: [PATCH 2/3] MAN: IP addresss does not work when used for ad_server

https://fedorahosted.org/sssd/ticket/1998

Currently using IP address as value of ad_server is not supported, so
the man pages should not mention that as an option.
---
 src/man/sssd-ad.5.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index fef7a2d827118dec9c4dcba6cb2ece82daba4a86..92656929461885690d1863947ce528ecb782562b 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -106,7 +106,7 @@ ldap_id_mapping = False
                     <term>ad_server, ad_backup_server (string)</term>
                     <listitem>
                         <para>
-                            The comma-separated list of IP addresses or
+                            The comma-separated list of
                             hostnames of the AD servers to which SSSD should
                             connect in order of preference. For more
                             information on failover and server redundancy, see
-- 
1.8.3.1

-------------- next part --------------
>From 9c72498e6c68eb289271c8fe554e9d577f4b4431 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Fri, 12 Jul 2013 16:55:47 +0200
Subject: [PATCH 3/3] MAN: Clarify the min_id/max_id limits further

https://fedorahosted.org/sssd/ticket/2005

Some users were confused by our description of min_id/max_id and thought
the limits only applied to returning entries from the NSS responder.
However, the limits are actually enforced on the back end side, so the
entries are not even saved to cache.
---
 src/man/sssd.conf.5.xml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index 8df2bd97c4edb793e74a698b9531b3e7ab7c1abe..a0321df8b01950c0eedc3176f154ea41f09a8087 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -914,6 +914,10 @@ override_homedir = /home/%u
                             range will be reported as expected.
                         </para>
                         <para>
+                            These ID limits affect even saving entries to
+                            cache, not only returning them by name or ID.
+                        </para>
+                        <para>
                             Default: 1 for min_id, 0 (no limit) for max_id
                         </para>
                     </listitem>
-- 
1.8.3.1



More information about the sssd-devel mailing list