From 80959e30ce7c57b5865f5358c42a7bcffe450d4d Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 20 May 2024 17:22:36 +0200 Subject: Merging upstream version 2.9.5. Signed-off-by: Daniel Baumann --- src/man/sv/idmap_sss.8.xml | 4 +- src/man/sv/pam_sss.8.xml | 4 +- src/man/sv/pam_sss_gss.8.xml | 4 +- src/man/sv/sss-certmap.5.xml | 4 +- src/man/sv/sss_cache.8.xml | 4 +- src/man/sv/sss_debuglevel.8.xml | 4 +- src/man/sv/sss_obfuscate.8.xml | 4 +- src/man/sv/sss_override.8.xml | 4 +- src/man/sv/sss_rpcidmapd.5.xml | 4 +- src/man/sv/sss_seed.8.xml | 4 +- src/man/sv/sss_ssh_authorizedkeys.1.xml | 4 +- src/man/sv/sss_ssh_knownhostsproxy.1.xml | 4 +- src/man/sv/sssctl.8.xml | 4 +- src/man/sv/sssd-ad.5.xml | 4 +- src/man/sv/sssd-files.5.xml | 4 +- src/man/sv/sssd-ifp.5.xml | 4 +- src/man/sv/sssd-ipa.5.xml | 4 +- src/man/sv/sssd-kcm.8.xml | 4 +- src/man/sv/sssd-krb5.5.xml | 4 +- src/man/sv/sssd-ldap-attributes.5.xml | 16 ++++---- src/man/sv/sssd-ldap.5.xml | 4 +- src/man/sv/sssd-session-recording.5.xml | 4 +- src/man/sv/sssd-simple.5.xml | 4 +- src/man/sv/sssd-sudo.5.xml | 4 +- src/man/sv/sssd-systemtap.5.xml | 4 +- src/man/sv/sssd.8.xml | 4 +- src/man/sv/sssd.conf.5.xml | 57 ++++++++++++++++++++++++++--- src/man/sv/sssd_krb5_localauth_plugin.8.xml | 4 +- src/man/sv/sssd_krb5_locator_plugin.8.xml | 4 +- 29 files changed, 114 insertions(+), 67 deletions(-) (limited to 'src/man/sv') diff --git a/src/man/sv/idmap_sss.8.xml b/src/man/sv/idmap_sss.8.xml index ff69be5..962193f 100644 --- a/src/man/sv/idmap_sss.8.xml +++ b/src/man/sv/idmap_sss.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/pam_sss.8.xml b/src/man/sv/pam_sss.8.xml index a81d292..72f7a2e 100644 --- a/src/man/sv/pam_sss.8.xml +++ b/src/man/sv/pam_sss.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/pam_sss_gss.8.xml b/src/man/sv/pam_sss_gss.8.xml index c439419..589eee6 100644 --- a/src/man/sv/pam_sss_gss.8.xml +++ b/src/man/sv/pam_sss_gss.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss-certmap.5.xml b/src/man/sv/sss-certmap.5.xml index 6e52350..0872426 100644 --- a/src/man/sv/sss-certmap.5.xml +++ b/src/man/sv/sss-certmap.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_cache.8.xml b/src/man/sv/sss_cache.8.xml index f6778ee..a425ec8 100644 --- a/src/man/sv/sss_cache.8.xml +++ b/src/man/sv/sss_cache.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_debuglevel.8.xml b/src/man/sv/sss_debuglevel.8.xml index 89856e9..dd365b3 100644 --- a/src/man/sv/sss_debuglevel.8.xml +++ b/src/man/sv/sss_debuglevel.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_obfuscate.8.xml b/src/man/sv/sss_obfuscate.8.xml index c5f0af0..02d3b08 100644 --- a/src/man/sv/sss_obfuscate.8.xml +++ b/src/man/sv/sss_obfuscate.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_override.8.xml b/src/man/sv/sss_override.8.xml index a6c08b5..7efbd43 100644 --- a/src/man/sv/sss_override.8.xml +++ b/src/man/sv/sss_override.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_rpcidmapd.5.xml b/src/man/sv/sss_rpcidmapd.5.xml index 75378b3..2473ea8 100644 --- a/src/man/sv/sss_rpcidmapd.5.xml +++ b/src/man/sv/sss_rpcidmapd.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_seed.8.xml b/src/man/sv/sss_seed.8.xml index dbc77e9..cf733cc 100644 --- a/src/man/sv/sss_seed.8.xml +++ b/src/man/sv/sss_seed.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_ssh_authorizedkeys.1.xml b/src/man/sv/sss_ssh_authorizedkeys.1.xml index 86f9d36..fc1dabb 100644 --- a/src/man/sv/sss_ssh_authorizedkeys.1.xml +++ b/src/man/sv/sss_ssh_authorizedkeys.1.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sss_ssh_knownhostsproxy.1.xml b/src/man/sv/sss_ssh_knownhostsproxy.1.xml index 04f9eb7..04221b6 100644 --- a/src/man/sv/sss_ssh_knownhostsproxy.1.xml +++ b/src/man/sv/sss_ssh_knownhostsproxy.1.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssctl.8.xml b/src/man/sv/sssctl.8.xml index 30db1ed..8bc9d6a 100644 --- a/src/man/sv/sssctl.8.xml +++ b/src/man/sv/sssctl.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-ad.5.xml b/src/man/sv/sssd-ad.5.xml index 3d69532..7cc8a7f 100644 --- a/src/man/sv/sssd-ad.5.xml +++ b/src/man/sv/sssd-ad.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-files.5.xml b/src/man/sv/sssd-files.5.xml index c690768..ef48fe9 100644 --- a/src/man/sv/sssd-files.5.xml +++ b/src/man/sv/sssd-files.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-ifp.5.xml b/src/man/sv/sssd-ifp.5.xml index dfdafce..495b491 100644 --- a/src/man/sv/sssd-ifp.5.xml +++ b/src/man/sv/sssd-ifp.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-ipa.5.xml b/src/man/sv/sssd-ipa.5.xml index 3163110..dda30b6 100644 --- a/src/man/sv/sssd-ipa.5.xml +++ b/src/man/sv/sssd-ipa.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-kcm.8.xml b/src/man/sv/sssd-kcm.8.xml index 362b8ee..5304898 100644 --- a/src/man/sv/sssd-kcm.8.xml +++ b/src/man/sv/sssd-kcm.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-krb5.5.xml b/src/man/sv/sssd-krb5.5.xml index fbd3a4f..e1c60d4 100644 --- a/src/man/sv/sssd-krb5.5.xml +++ b/src/man/sv/sssd-krb5.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-ldap-attributes.5.xml b/src/man/sv/sssd-ldap-attributes.5.xml index fe7d77e..0337f09 100644 --- a/src/man/sv/sssd-ldap-attributes.5.xml +++ b/src/man/sv/sssd-ldap-attributes.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor @@ -552,12 +552,12 @@ alternativet ldap_user_authorized_rhost skall fungera. Namnet på LDAP-attributet som innehåller användarens e-postadress. - Observera: om en e-postadress för användaren står i konflikt med en -e-postadress eller fullt kvalificerat namn för en annan användare, då kommer -SSSD inte kunna serva dessa användare ordentligt. Om flera användare av -något skäl behöver dela samma e-postadress, sätt då detta attributnamn till -ett som inte finns för att avaktivera uppslagning/inloggning av användare -via e-post. + Note: If an email address of a user conflicts with an email address or fully +qualified name of another user, then SSSD will not be able to serve those +users properly. This option allows users to login by (1) username, and (2) +e-mail address. If for some reason several users need to share the same +email address then set this option to a nonexistent attribute name in order +to disable user lookup/login by email. Standard: mail diff --git a/src/man/sv/sssd-ldap.5.xml b/src/man/sv/sssd-ldap.5.xml index c545327..65442ee 100644 --- a/src/man/sv/sssd-ldap.5.xml +++ b/src/man/sv/sssd-ldap.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-session-recording.5.xml b/src/man/sv/sssd-session-recording.5.xml index 51824f9..1450f62 100644 --- a/src/man/sv/sssd-session-recording.5.xml +++ b/src/man/sv/sssd-session-recording.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-simple.5.xml b/src/man/sv/sssd-simple.5.xml index 754929d..605f8c2 100644 --- a/src/man/sv/sssd-simple.5.xml +++ b/src/man/sv/sssd-simple.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-sudo.5.xml b/src/man/sv/sssd-sudo.5.xml index 69e833c..dd6616c 100644 --- a/src/man/sv/sssd-sudo.5.xml +++ b/src/man/sv/sssd-sudo.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd-systemtap.5.xml b/src/man/sv/sssd-systemtap.5.xml index 0e1dc1d..de98940 100644 --- a/src/man/sv/sssd-systemtap.5.xml +++ b/src/man/sv/sssd-systemtap.5.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd.8.xml b/src/man/sv/sssd.8.xml index 9ecb452..c538bc3 100644 --- a/src/man/sv/sssd.8.xml +++ b/src/man/sv/sssd.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd.conf.5.xml b/src/man/sv/sssd.conf.5.xml index b8aded6..b619f32 100644 --- a/src/man/sv/sssd.conf.5.xml +++ b/src/man/sv/sssd.conf.5.xml @@ -1,6 +1,6 @@ - ]> @@ -1463,7 +1463,7 @@ pam_account_locked_message = Kontot är låst, kontakta kundtjänsten. Enable passkey device based authentication. - Standard: False + Standard: True @@ -1565,7 +1565,7 @@ pam_cert_verification = partial_chain - pam_p11_allowed_services (heltal) + pam_p11_allowed_services (string) En kommaseparerad lista av PAM-tjänstenamn för vilka det kommer vara @@ -3284,6 +3284,23 @@ DNS-fråga om tjänsteupptäckt. + + failover_primary_timeout (integer) + + + When no primary server is currently available, SSSD fail overs to a backup +server. This option defines the amount of time (in seconds) to wait before +SSSD tries to reconnect to a primary server again. + + + Note: The minimum value is 31. + + + Default: 31 + + + + override_gid (heltal) @@ -3485,7 +3502,8 @@ provider) only support a password based authentication, while others can handle PKINIT based Smartcard authentication (AD, IPA), two-factor authentication (IPA), or other methods against a central instance. By default in such cases authentication is only performed with the methods -supported by the backend. +supported by the backend. With this option additional methods can be enabled +which are evaluated and checked locally. There are three possible values for this option: match, only, @@ -3496,6 +3514,35 @@ local authentication. As an example, enable:passkey, only enables passkey for local authentication. Multiple enable values should be comma-separated, such as enable:passkey, enable:smartcard + + + The following table shows which authentication methods, if configured +properly, are currently enabled or disabled for each backend, with the +default local_auth_policy: match + + + + + + + + + + local_auth_policy = match (default) + Passkey + Smartcard + + + IPAaktiverat + aktiverat + + ADdisabled + aktiverat + + LDAPdisabled + disabled + + Please note that if local Smartcard authentication is enabled and a Smartcard is present, Smartcard authentication will be preferred over the diff --git a/src/man/sv/sssd_krb5_localauth_plugin.8.xml b/src/man/sv/sssd_krb5_localauth_plugin.8.xml index 9d93108..582d6a3 100644 --- a/src/man/sv/sssd_krb5_localauth_plugin.8.xml +++ b/src/man/sv/sssd_krb5_localauth_plugin.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor diff --git a/src/man/sv/sssd_krb5_locator_plugin.8.xml b/src/man/sv/sssd_krb5_locator_plugin.8.xml index 32a68dc..4618cab 100644 --- a/src/man/sv/sssd_krb5_locator_plugin.8.xml +++ b/src/man/sv/sssd_krb5_locator_plugin.8.xml @@ -1,6 +1,6 @@ - + SSSD manualsidor -- cgit v1.2.3