URL: https://github.com/SSSD/sssd/pull/325 Author: amitkumar50 Title: #325: MAN: Improve description of 'trusted domain section' in sssd.conf's man page Action: synchronized
To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/325/head:pr325 git checkout pr325
From b946c3a37e9a1af315ff5b4ced2d16b872717389 Mon Sep 17 00:00:00 2001 From: AmitKumar <amitk...@redhat.com> Date: Tue, 18 Jul 2017 21:03:04 +0530 Subject: [PATCH 1/3] MAN: Improve description of 'trusted domain section' in sssd.conf's man page PR generated to include explaination for ipa ad trust sssd configuration where ad has a child domain. Explanation is added to 'TRUSTED DOMAIN SECTION'. Also an example is included to better understanding. Resolves: https://pagure.io/SSSD/sssd/issue/3399 --- src/man/sssd.conf.5.xml | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 7ac511633..a3fc994b4 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -2914,7 +2914,9 @@ ldap_user_extra_attrs = phone:telephoneNumber <para> Some options used in the domain section can also be used in the trusted domain section, that is, in a section called - <quote>[domain/<replaceable>DOMAIN_NAME</replaceable>/<replaceable>TRUSTED_DOMAIN_NAME</replaceable>]</quote>. + <quote>[domain/<replaceable>DOMAIN_NAME</replaceable>/<replaceable>TRUSTED_DOMAIN_NAME</replaceable>]</quote>. + Where DOMAIN_NAME is actual joined-to base domain. Please refer + examples below for explanation. Currently supported options in the trusted domain section are: </para> <para>ldap_search_base,</para> @@ -2933,9 +2935,9 @@ ldap_user_extra_attrs = phone:telephoneNumber </refsect1> <refsect1 id='example'> - <title>EXAMPLE</title> + <title>EXAMPLES</title> <para> - The following example shows a typical SSSD config. It does + 1. The following example shows a typical SSSD config. It does not describe configuration of the domains themselves - refer to documentation on configuring domains for more details. <programlisting> @@ -2964,6 +2966,16 @@ min_id = 10000 max_id = 20000 enumerate = False </programlisting> + </para> + <para> + 2. The following example shows configuration in IPA AD trust. AD having + having child domain. Suppose IPA domain(ipa.com) has trust with AD + domain(ad.com). ad.com has child domain(child.ad.com). To enable + shortnames in child domain following configuration should be used. +<programlisting> +[domain/ipa.com/child.ad.com] +use_fully_qualified_names = false +</programlisting> </para> </refsect1> From 95bfe61c9bf37c290b12ffd8a6bf6e6da0003406 Mon Sep 17 00:00:00 2001 From: AmitKumar <amitk...@redhat.com> Date: Mon, 14 Aug 2017 22:17:04 +0530 Subject: [PATCH 2/3] MAN: Improve description of 'trusted domain section Add an explanation and an example about configuring a trusted domain's option in sssd.conf. Resolves: https://pagure.io/SSSD/sssd/issue/3399 --- src/man/sssd.conf.5.xml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index a3fc994b4..b11fdafd9 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -2914,9 +2914,9 @@ ldap_user_extra_attrs = phone:telephoneNumber <para> Some options used in the domain section can also be used in the trusted domain section, that is, in a section called - <quote>[domain/<replaceable>DOMAIN_NAME</replaceable>/<replaceable>TRUSTED_DOMAIN_NAME</replaceable>]</quote>. - Where DOMAIN_NAME is actual joined-to base domain. Please refer - examples below for explanation. + <quote>[domain/<replaceable>DOMAIN_NAME</replaceable>/<replaceable>TRUSTED_DOMAIN_NAME</replaceable>]</quote>. + Where DOMAIN_NAME is the actual joined-to base domain. Please refer + to examples below for explanation. Currently supported options in the trusted domain section are: </para> <para>ldap_search_base,</para> @@ -2969,9 +2969,9 @@ enumerate = False </para> <para> 2. The following example shows configuration in IPA AD trust. AD having - having child domain. Suppose IPA domain(ipa.com) has trust with AD - domain(ad.com). ad.com has child domain(child.ad.com). To enable - shortnames in child domain following configuration should be used. + having child domain. Suppose IPA domain (ipa.com) has trust with AD + domain(ad.com). ad.com has child domain (child.ad.com). To enable + shortnames in child domain the following configuration should be used. <programlisting> [domain/ipa.com/child.ad.com] use_fully_qualified_names = false From 47360d54dbfbd3e7d14d36bf93b1963a295cb04b Mon Sep 17 00:00:00 2001 From: amitkuma <amitk...@redhat.com> Date: Thu, 31 Aug 2017 00:00:44 +0530 Subject: [PATCH 3/3] MAN: Improve description of 'trusted domain section Add an explanation and an example about configuring a trusted domain's option in sssd.conf. Resolves: https://pagure.io/SSSD/sssd/issue/3399 --- src/man/sssd.conf.5.xml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index b11fdafd9..b6dcea7c2 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -2968,10 +2968,11 @@ enumerate = False </programlisting> </para> <para> - 2. The following example shows configuration in IPA AD trust. AD having - having child domain. Suppose IPA domain (ipa.com) has trust with AD - domain(ad.com). ad.com has child domain (child.ad.com). To enable - shortnames in child domain the following configuration should be used. + 2. The following example shows configuration of IPA AD trust where + the AD forest consists of two domains in a parent-child structure. + Suppose IPA domain (ipa.com) has trust with AD domain(ad.com). + ad.com has child domain (child.ad.com). To enable shortnames in + child domain the following configuration should be used. <programlisting> [domain/ipa.com/child.ad.com] use_fully_qualified_names = false
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
