From bfcdfd678f7c1e36e3067ea22ed1094f7138a926 Mon Sep 17 00:00:00 2001 From: Justin Stephenson Date: Fri, 12 Apr 2024 14:59:28 -0400 Subject: [PATCH] man: Add local_auth_policy table --- src/man/sssd.conf.5.xml | 34 +++++++++++++++++++++++++++++++++- 1 file changed, 33 insertions(+), 1 deletion(-) diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 37ec42056c4..f53fcb35df0 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -4002,7 +4002,9 @@ subdomain_inherit = ldap_purge_cache_timeout two-factor authentication (IPA), or other methods against a central instance. By default in such cases authentication is only performed with the methods - supported by the backend. + supported by the backend. With this option additional + methods can be enabled which are evaluated and checked + locally. There are three possible values for this option: @@ -4016,6 +4018,36 @@ subdomain_inherit = ldap_purge_cache_timeout should be comma-separated, such as enable:passkey, enable:smartcard + + + The following table shows which authentication + methods, if configured properly, are currently enabled + or disabled for each backend, with the default + local_auth_policy: match + + + + + + + + + + local_auth_policy = match (default) + Passkey + Smartcard + + + IPAenabled + enabled + + ADdisabled + enabled + + LDAPdisabled + disabled + + Please note that if local Smartcard authentication is enabled and a Smartcard is present, Smartcard