IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Mention PAC issue with NFS in service plugin doc

Browse Source 
https://fedorahosted.org/freeipa/ticket/2960
This commit is contained in:
Sumit Bose
2013-02-27 10:32:40 +01:00
committed by Martin Kosek
parent efd4d80827
commit 5f3142c1e9
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
ipalib/plugins/service.py
View File

@@ -66,6 +66,11 @@ EXAMPLES:
Override a default list of supported PAC types for the service: Override a default list of supported PAC types for the service:
ipa service-mod HTTP/web.example.com --pac-type=MS-PAC ipa service-mod HTTP/web.example.com --pac-type=MS-PAC
A typical use case where overriding the PAC type is needed is NFS.
Currently the related code in the Linux kernel can only handle Kerberos
tickets up to a maximal size. Since the PAC data can become quite large it
is recommended to set --pac-type=NONE for NFS services.
Delete an IPA service: Delete an IPA service:
ipa service-del HTTP/web.example.com ipa service-del HTTP/web.example.com
@@ -258,7 +263,8 @@ class service(LDAPObject):
cli_name='pac_type', cli_name='pac_type',
label=_('PAC type'), label=_('PAC type'),
doc=_("Override default list of supported PAC types." doc=_("Override default list of supported PAC types."
" Use 'NONE' to disable PAC support for this service"), " Use 'NONE' to disable PAC support for this service,"
" e.g. this might be necessary for NFS services."),
values=(u'MS-PAC', u'PAD', u'NONE'), values=(u'MS-PAC', u'PAD', u'NONE'),
csv=True, csv=True,
), ),