sssd.8.xml revision 9ee8bf83ab1cb53e93111adb64c4a66e607d7115
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai<!DOCTYPE reference PUBLIC "-//OASIS//DTD DocBook V4.4//EN"
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai"http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai<reference>
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/upstream.xml" />
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai </refmeta>
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai <refpurpose>System Security Services Daemon</refpurpose>
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai </refnamediv>
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai <cmdsynopsis>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </cmdsynopsis>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </refsynopsisdiv>
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai <command>SSSD</command> provides a set of daemons to manage access to remote
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai directories and authentication mechanisms. It provides an NSS and
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai PAM interface toward the system and a pluggable backend system to
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai connect to multiple different account sources as well as D-Bus
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai interface. It is also the basis to provide client auditing and
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai policy services for projects like FreeIPA. It provides a more robust database
facf4a8d7b59fde89a8662b4f4c73a758e6c402cllai to store local users as well as extended user data.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <option>-d</option>,<option>--debug-level</option>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/debug_levels.xml" />
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <option>--debug-timestamps=</option><replaceable>mode</replaceable>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <emphasis>1</emphasis>: Add a timestamp to the debug messages
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <emphasis>0</emphasis>: Disable timestamp in the debug messages
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <option>--debug-microseconds=</option><replaceable>mode</replaceable>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <emphasis>0</emphasis>: Disable microseconds in timestamp
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <option>-f</option>,<option>--debug-to-files</option>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Send the debug output to files instead of stderr. By default, the
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi log files are stored in <filename>/var/log/sssd</filename> and
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi there are separate log files for every SSSD service and domain.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <option>-D</option>,<option>--daemon</option>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Become a daemon after starting up.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <option>-i</option>,<option>--interactive</option>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Run in the foreground, don't become a daemon.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <option>-c</option>,<option>--config</option>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Specify a non-default config file. The default is
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <filename>/etc/sssd/sssd.conf</filename>. For reference
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi on the config file syntax and options, consult the
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <citerefentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </citerefentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/param_help.xml" />
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Print version number and exit.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </variablelist>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Informs the SSSD to gracefully terminate all of its
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi child processes and then shut down the monitor.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Tells the SSSD to stop writing to its current debug
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi file descriptors and to close and reopen them. This is
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi meant to facilitate log rolling with programs like
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Tells the SSSD to simulate offline operation for the
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi duration of the <quote>offline_timeout</quote>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi parameter. This is useful for testing. The signal
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi can be sent to either the sssd process or any sssd_be
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi process directly.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi Tells the SSSD to go online immediately. This is
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi useful for testing. The signal can be sent to either
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi the sssd process or any sssd_be process directly.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </varlistentry>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi </variablelist>
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi If the environment variable SSS_NSS_USE_MEMCACHE is set to "NO",
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi client applications will not use the fast in memory cache.
9e5aa9d8a21f8efa8ba9c9e4a0aa6edc66d07eb2Robert Mustacchi <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />