[Freeipa-users] Re: IPA client's sssd.conf
On pe, 28 helmi 2020, Ronald Wimmer wrote:
For instance, I would like to set values for:
ldap_sudo_smart_refresh_interval or
default_shell = /bin/bash
No, there are no centralized settings like that.
There are settings managed as part of 'ipa config-mod', but out of those
SSSD picks up the following settings:
- whether migration mode is enabled,
- default SELinux user context and map order,
- domain resolution order, for trusted domains ('subdomains' in SSSD
speak).
Technically, SSSD also loads a host object specific to the host it runs
on, so there are some properties that can be exposed via this. For
example, ID View applied to the host is discovered this way and
FleetCommander integration (deskprofile) is retrieving rules in a
similar way.
But nothing like this is implemented for a generic option support right
now.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland