[autobackport: sssd-2-9-4] man: add details about 'an2ln'#8435
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates the sssd_krb5_localauth_plugin man page to document the disabling of the an2ln module for AD and IPA providers, which is a recent security enhancement. The changes are good, but I've suggested a small wording improvement to a note to make it less ambiguous, which is important for documentation related to security features.
With a recent security fix the 'an2ln' module was disabled in SSSD's configuration snippet for the localauth configuration of libkrb5. With this patch the related man page is update accordingly. Reviewed-by: Alexey Tikhonov <atikhono@redhat.com> Reviewed-by: Justin Stephenson <jstephen@redhat.com> (cherry picked from commit bcd9998)
|
The pull request was accepted by @alexey-tikhonov with the following PR CI status: 🟢 CodeQL (success) There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging. |
1e8e1c1 to
b840df8
Compare
This is an automatic backport of PR#8396 man: add details about 'an2ln' to branch sssd-2-9-4, created by @sumit-bose.
Please make sure this backport is correct.
Note
The commits were cherry-picked without conflicts.
You can push changes to this pull request
Original commits
bcd9998 - man: add details about 'an2ln'
Backported commits
Original Pull Request Body
With a recent security fix the 'an2ln' module was disabled in SSSD's configuration snippet for the localauth configuration of libkrb5. With this patch the related man page is update accordingly.