SSSD-SIMPLE(5) File Formats and Conventions SSSD-SIMPLE(5)NAME
sssd-simple - the configuration file for SSSD's 'simple' access-control provider
DESCRIPTION
This manual page describes the configuration of the simple access-control provider for sssd(8). For a detailed syntax reference, refer to
the "FILE FORMAT" section of the sssd.conf(5) manual page.
The simple access provider grants or denies access based on an access or deny list of user or group names. The following rules apply:
o If all lists are empty, access is granted
o If any list is provided, the order of evaluation is allow,deny. This means that any matching deny rule will supersede any matched allow
rule.
o If either or both "allow" lists are provided, all users are denied unless they appear in the list.
o If only "deny" lists are provided, all users are granted access unless they appear in the list.
CONFIGURATION OPTIONS
Refer to the section "DOMAIN SECTIONS" of the sssd.conf(5) manual page for details on the configuration of an SSSD domain.
simple_allow_users (string)
Comma separated list of users who are allowed to log in.
simple_deny_users (string)
Comma separated list of users who are explicitly denied access.
simple_allow_groups (string)
Comma separated list of groups that are allowed to log in. This applies only to groups within this SSSD domain. Local groups are not
evaluated.
simple_deny_groups (string)
Comma separated list of groups that are explicitly denied access. This applies only to groups within this SSSD domain. Local groups are
not evaluated.
Please note that it is an configuration error if both, simple_allow_users and simple_deny_users, are defined.
EXAMPLE
The following example assumes that SSSD is correctly configured and example.com is one of the domains in the [sssd] section. This examples
shows only the simple access provider-specific options.
[domain/example.com]
access_provider = simple
simple_allow_users = user1, user2
SEE ALSO sssd.conf(5), sssd(8)AUTHORS
The SSSD upstream - http://fedorahosted.org/sssd
SSSD 03/04/2013 SSSD-SIMPLE(5)
Check Out this Related Man Page
SSS_SEED(8) SSSD Manual pages SSS_SEED(8)NAME
sss_seed - seed the SSSD cache with a user
SYNOPSIS
sss_seed [options] -D DOMAIN -n USER
DESCRIPTION
sss_seed seeds the SSSD cache with a user entry and temporary password. If a user entry is already present in the SSSD cache then the entry
is updated with the temporary password.
OPTIONS -D,--domain DOMAIN
Provide the name of the domain in which the user is a member of. The domain is also used to retrieve user information. The domain must
be configured in sssd.conf. The DOMAIN option must be provided. Information retrieved from the domain overrides what is provided in the
options.
-n,--username USER
The username of the entry to be created or modified in the cache. The USER option must be provided.
-u,--uid UID
Set the UID of the user to UID.
-g,--gid GID
Set the GID of the user to GID.
-c,--gecos COMMENT
Any text string describing the user. Often used as the field for the user's full name.
-h,--home HOME_DIR
Set the home directory of the user to HOME_DIR.
-s,--shell SHELL
Set the login shell of the user to SHELL.
-i,--interactive
Interactive mode for entering user information. This option will only prompt for information not provided in the options or retrieved
from the domain.
-p,--password-file PASS_FILE
Specify file to read user's password from. (if not specified password is prompted for)
-?,--help
Display help message and exit.
NOTES
The length of the password (or the size of file specified with -p or --password-file option) must be less than or equal to PASS_MAX bytes
(64 bytes on systems with no globally-defined PASS_MAX value).
SEE ALSO sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8),
sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8),
sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),pam_sss(8).
AUTHORS
The SSSD upstream - http://fedorahosted.org/sssd
SSSD 06/17/2014 SSS_SEED(8)