-
Notifications
You must be signed in to change notification settings - Fork 16
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
docs(changelog): version 1.4.0 [citest skip]
Update changelog and .README.html for version 1.4.0 Signed-off-by: Rich Megginson <[email protected]>
- Loading branch information
Showing
2 changed files
with
45 additions
and
13 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -203,8 +203,12 @@ <h1 class="toc-title">Contents</h1> | |
id="toc-ad_dyndns_server">ad_dyndns_server</a></li> | ||
<li><a href="#ad_integration_join_parameters" | ||
id="toc-ad_integration_join_parameters">ad_integration_join_parameters</a></li> | ||
<li><a href="#ad_integration_sssd_settings" | ||
id="toc-ad_integration_sssd_settings">ad_integration_sssd_settings</a></li> | ||
<li><a href="#ad_integration_sssd_custom_settings" | ||
id="toc-ad_integration_sssd_custom_settings">ad_integration_sssd_custom_settings</a></li> | ||
<li><a href="#ad_integration_preserve_authselect_profile" | ||
id="toc-ad_integration_preserve_authselect_profile">ad_integration_preserve_authselect_profile</a></li> | ||
</ul></li> | ||
</ul></li> | ||
<li><a href="#example-playbook" id="toc-example-playbook">Example | ||
|
@@ -462,30 +466,45 @@ <h3 id="ad_dyndns_server">ad_dyndns_server</h3> | |
for details. Example: ad_integration_join_parameters: "--user-principal | ||
host/<a | ||
href="mailto:[email protected]">[email protected]</a>"</p> | ||
<h3 id="ad_integration_sssd_settings">ad_integration_sssd_settings</h3> | ||
<p>A list of setting to be included into the <code>[sssd]</code> section | ||
of the sssd.conf file. See sssd.conf man pages for details. Example:</p> | ||
<div class="sourceCode" id="cb2"><pre | ||
class="sourceCode yaml"><code class="sourceCode yaml"><span id="cb2-1"><a href="#cb2-1" aria-hidden="true" tabindex="-1"></a><span class="fu">ad_integration_sssd_settings</span><span class="kw">:</span></span> | ||
<span id="cb2-2"><a href="#cb2-2" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="kw">-</span><span class="at"> </span><span class="fu">key</span><span class="kw">:</span><span class="at"> </span><span class="st">"configuration_name"</span></span> | ||
<span id="cb2-3"><a href="#cb2-3" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">value</span><span class="kw">:</span><span class="at"> </span><span class="st">"configuration_value"</span></span></code></pre></div> | ||
<h3 | ||
id="ad_integration_sssd_custom_settings">ad_integration_sssd_custom_settings</h3> | ||
<p>A list of custom setting to be included into the | ||
<code>[domain/$REALM]</code> section of the sssd.conf file. See | ||
sssd.conf man pages for details. Example:</p> | ||
<div class="sourceCode" id="cb2"><pre | ||
class="sourceCode yaml"><code class="sourceCode yaml"><span id="cb2-1"><a href="#cb2-1" aria-hidden="true" tabindex="-1"></a><span class="fu">ad_integration_sssd_custom_settings</span><span class="kw">:</span></span> | ||
<span id="cb2-2"><a href="#cb2-2" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="kw">-</span><span class="at"> </span><span class="fu">key</span><span class="kw">:</span><span class="at"> </span><span class="st">"configuration_name"</span></span> | ||
<span id="cb2-3"><a href="#cb2-3" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">value</span><span class="kw">:</span><span class="at"> </span><span class="st">"configuration_value"</span></span></code></pre></div> | ||
<div class="sourceCode" id="cb3"><pre | ||
class="sourceCode yaml"><code class="sourceCode yaml"><span id="cb3-1"><a href="#cb3-1" aria-hidden="true" tabindex="-1"></a><span class="fu">ad_integration_sssd_custom_settings</span><span class="kw">:</span></span> | ||
<span id="cb3-2"><a href="#cb3-2" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="kw">-</span><span class="at"> </span><span class="fu">key</span><span class="kw">:</span><span class="at"> </span><span class="st">"configuration_name"</span></span> | ||
<span id="cb3-3"><a href="#cb3-3" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">value</span><span class="kw">:</span><span class="at"> </span><span class="st">"configuration_value"</span></span></code></pre></div> | ||
<h3 | ||
id="ad_integration_preserve_authselect_profile">ad_integration_preserve_authselect_profile</h3> | ||
<p>This is a boolean, default is <code>false</code>. If | ||
<code>true</code>, configure realmd.conf to remove the | ||
<code>authselect</code> command from <code>sssd-enable-logins</code> to | ||
avoid overwriting previous PAM/nsswitch changes, until <a | ||
href="https://issues.redhat.com/browse/RHEL-5101">RHEL-5101</a> is | ||
addressed.</p> | ||
<h1 id="example-playbook">Example Playbook</h1> | ||
<p>The following is an example playbook to setup direct Active Directory | ||
integration with AD domain <code>domain.example.com</code>, the join | ||
will be performed with user Administrator using the vault stored | ||
password. Prior to the join, the crypto policy for AD SUPPORT with RC4 | ||
encryption allowed will be set.</p> | ||
<div class="sourceCode" id="cb3"><pre | ||
class="sourceCode yaml"><code class="sourceCode yaml"><span id="cb3-1"><a href="#cb3-1" aria-hidden="true" tabindex="-1"></a><span class="kw">-</span><span class="at"> </span><span class="fu">hosts</span><span class="kw">:</span><span class="at"> all</span></span> | ||
<span id="cb3-2"><a href="#cb3-2" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">vars</span><span class="kw">:</span></span> | ||
<span id="cb3-3"><a href="#cb3-3" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_realm</span><span class="kw">:</span><span class="at"> </span><span class="st">"domain.example.com"</span></span> | ||
<span id="cb3-4"><a href="#cb3-4" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_password</span><span class="kw">:</span><span class="at"> !vault | …vault encrypted password…</span></span> | ||
<span id="cb3-5"><a href="#cb3-5" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_manage_crypto_policies</span><span class="kw">:</span><span class="at"> </span><span class="ch">true</span></span> | ||
<span id="cb3-6"><a href="#cb3-6" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_allow_rc4_crypto</span><span class="kw">:</span><span class="at"> </span><span class="ch">true</span></span> | ||
<span id="cb3-7"><a href="#cb3-7" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">roles</span><span class="kw">:</span></span> | ||
<span id="cb3-8"><a href="#cb3-8" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="kw">-</span><span class="at"> linux-system-roles.ad_integration</span></span></code></pre></div> | ||
<div class="sourceCode" id="cb4"><pre | ||
class="sourceCode yaml"><code class="sourceCode yaml"><span id="cb4-1"><a href="#cb4-1" aria-hidden="true" tabindex="-1"></a><span class="kw">-</span><span class="at"> </span><span class="fu">hosts</span><span class="kw">:</span><span class="at"> all</span></span> | ||
<span id="cb4-2"><a href="#cb4-2" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">vars</span><span class="kw">:</span></span> | ||
<span id="cb4-3"><a href="#cb4-3" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_realm</span><span class="kw">:</span><span class="at"> </span><span class="st">"domain.example.com"</span></span> | ||
<span id="cb4-4"><a href="#cb4-4" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_password</span><span class="kw">:</span><span class="at"> !vault | …vault encrypted password…</span></span> | ||
<span id="cb4-5"><a href="#cb4-5" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_manage_crypto_policies</span><span class="kw">:</span><span class="at"> </span><span class="ch">true</span></span> | ||
<span id="cb4-6"><a href="#cb4-6" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">ad_integration_allow_rc4_crypto</span><span class="kw">:</span><span class="at"> </span><span class="ch">true</span></span> | ||
<span id="cb4-7"><a href="#cb4-7" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="fu">roles</span><span class="kw">:</span></span> | ||
<span id="cb4-8"><a href="#cb4-8" aria-hidden="true" tabindex="-1"></a><span class="at"> </span><span class="kw">-</span><span class="at"> linux-system-roles.ad_integration</span></span></code></pre></div> | ||
<h1 id="rpm-ostree">rpm-ostree</h1> | ||
<p>See README-ostree.md</p> | ||
<h1 id="license">License</h1> | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters