search

SSSD / sssd

A daemon to manage identity, authentication and authorization for centrally-managed systems.
https://sssd.io
GNU General Public License v3.0
586 stars 236 forks source link

sssd.conf(8): FILE FORMAT "sssd.conf must be a regular file, owned by root and only root may read from or write to the file." No mentioning what will happen if the file are not root:root/root:wheel, o=rw/0600 #7346

Open georgemarselis-nvi opened 4 months ago

georgemarselis-nvi commented 4 months ago

image

Alternative wording, but I am not sure what I am writing is correct, I am judging from the behavior of other daemons:

FILE, FILE OWNERSHIP AND FILE PERMISSIONS

sssd.conf must be a regular file. It must be owned by root:root only, and read/write by root only. Incorrect file permissions will prevent the daemon from starting.

alexey-tikhonov commented 4 months ago

Man pages of what SSSD version do you inspect?

I'm asking because this particular wording was recently updated (but your remark might still be applicable).

georgemarselis-nvi commented 4 months ago

Man pages of what SSSD version do you inspect?

I'm asking because this particular wording was recently updated (but your remark might still be applicable).

https://man.archlinux.org/man/sssd.conf.5.en#DOMAIN_SECTIONS

picked this version from archlinux cuz archlinux tends to have good info, but the same is in die.net.

Hmmm. Now that I think of this, I am wondering: should the version of the software should be added the the man page heading? what do you think?

alexey-tikhonov commented 4 months ago

https://man.archlinux.org/man/sssd.conf.5.en#DOMAIN_SECTIONS

It says "2.9.4-4". Pretty fresh (last officially released).

georgemarselis-nvi commented 4 months ago

https://man.archlinux.org/man/sssd.conf.5.en#DOMAIN_SECTIONS

It says "2.9.4-4". Pretty fresh (last officially released).

Oh damn, apologies. My head has turned into cement 😅

I was more like thinking about baking it into the man page, much like PostgreSQL does:

image