|
 |
ced1f5 |
From a09a7a03f5b330cc45a0007a56d4789116a91e46 Mon Sep 17 00:00:00 2001
|
|
|
ced1f5 |
From: amitkuma <amitkuma@redhat.com>
|
|
|
ced1f5 |
Date: Tue, 6 Feb 2018 16:27:00 +0530
|
|
|
ced1f5 |
Subject: [PATCH 100/100] MAN: Explain how does auto_private_groups affect
|
|
|
ced1f5 |
subdomains
|
|
|
ced1f5 |
|
|
|
ced1f5 |
Fix explains how auto_private_groups affects subdomains.
|
|
|
ced1f5 |
a. POSIX sudomains, gets inherited to subdomain.
|
|
|
ced1f5 |
b. ID-mapping subdomains, already enabled.
|
|
|
ced1f5 |
|
|
|
ced1f5 |
Resolves: https://pagure.io/SSSD/sssd/issue/3627
|
|
|
ced1f5 |
|
|
|
ced1f5 |
Reviewed-by: Rob Crittenden <rcritten@redhat.com>
|
|
|
ced1f5 |
(cherry picked from commit 52ae76737f2df3012d67f6a0b5052c86022bffdd)
|
|
|
ced1f5 |
---
|
|
|
ced1f5 |
src/man/sssd.conf.5.xml | 11 ++++++++++-
|
|
|
ced1f5 |
1 file changed, 10 insertions(+), 1 deletion(-)
|
|
|
ced1f5 |
|
|
|
ced1f5 |
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
|
|
|
ced1f5 |
index 47da07c33bdcfbf2fa94ff932492e9ea4bbfe846..8d06f57539e3fc55189234aab2aea950ba14713a 100644
|
|
|
ced1f5 |
--- a/src/man/sssd.conf.5.xml
|
|
|
ced1f5 |
+++ b/src/man/sssd.conf.5.xml
|
|
|
ced1f5 |
@@ -2830,7 +2830,16 @@ subdomain_inherit = ldap_purge_cache_timeout
|
|
|
ced1f5 |
If this option is enabled, SSSD will automatically
|
|
|
ced1f5 |
create user private groups based on user's
|
|
|
ced1f5 |
UID number. The GID number is ignored in this case.
|
|
|
ced1f5 |
- </para>
|
|
|
ced1f5 |
+ </para>
|
|
|
ced1f5 |
+ <para>
|
|
|
ced1f5 |
+ For POSIX subdomains, setting the option in the main
|
|
|
ced1f5 |
+ domain is inherited in the subdomain.
|
|
|
ced1f5 |
+ </para>
|
|
|
ced1f5 |
+ <para>
|
|
|
ced1f5 |
+ For ID-mapping subdomains, auto_private_groups is
|
|
|
ced1f5 |
+ already enabled for the subdomains and setting it to
|
|
|
ced1f5 |
+ false will not have any effect for the subdomain.
|
|
|
ced1f5 |
+ </para>
|
|
|
ced1f5 |
<para>
|
|
|
ced1f5 |
NOTE: Because the GID number and the user private group
|
|
|
ced1f5 |
are inferred frm the UID number, it is not supported
|
|
|
ced1f5 |
--
|
|
|
ced1f5 |
2.14.3
|
|
|
ced1f5 |
|