From 261d75b456e9eec504bb3b04d0ec29b36653564e Mon Sep 17 00:00:00 2001 From: Justin Stephenson Date: Fri, 12 Apr 2024 14:59:28 -0400 Subject: [PATCH] man: Add local_auth_policy table --- src/man/sssd.conf.5.xml | 34 +++++++++++++++++++++++++++++++++- 1 file changed, 33 insertions(+), 1 deletion(-) diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 5bec05bdd24..d44f5a5f69e 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -3991,7 +3991,9 @@ subdomain_inherit = ldap_purge_cache_timeout two-factor authentication (IPA), or other methods against a central instance. By default in such cases authentication is only performed with the methods - supported by the backend. + supported by the backend. With this option additional + methods can be enabled which are evaluated and checked + locally. There are three possible values for this option: @@ -4005,6 +4007,36 @@ subdomain_inherit = ldap_purge_cache_timeout should be comma-separated, such as enable:passkey, enable:smartcard + + + The following table shows which authentication + methods, if configured properly, are currently enabled + or disabled for each backend, with the default + local_auth_policy: match + + + + + + + + + + local_auth_policy = match (default) + Passkey + Smartcard + + + IPAenabled + enabled + + ADdisabled + enabled + + LDAPdisabled + disabled + + Please note that if local Smartcard authentication is enabled and a Smartcard is present, Smartcard