English Finnish
debug_microseconds (bool)
Add microseconds to the timestamp in debug messages. If journald is enabled for SSSD debug logging this option is ignored.
Enable debug backtrace.
In case SSSD is run with debug_level less than 9, everything is logged to a ring buffer in memory and flushed to a log file on any error up to and including `min(0x0040, debug_level)` (i.e. if debug_level is explicitly set to 0 or 1 then only those error levels will trigger backtrace, otherwise up to 2).
Feature is only supported for `logger == files` (i.e. setting doesn't have effect for other logger types).
Options usable in SERVICE and DOMAIN sections
timeout (integer)
Timeout in seconds between heartbeats for this service. This is used to ensure that the process is alive and capable of answering requests. Note that after three missed heartbeats the process will terminate itself.
Default: 10
The [sssd] section
Section parameters
config_file_version (integer)
Comma separated list of services that are started when sssd itself starts. <phrase condition="have_systemd"> The services' list is optional on platforms where systemd is supported, as they will either be socket or D-Bus activated when needed. </phrase>
Supported services: nss, pam <phrase condition="with_sudo">, sudo</phrase> <phrase condition="with_autofs">, autofs</phrase> <phrase condition="with_ssh">, ssh</phrase> <phrase condition="with_pac_responder">, pac</phrase> <phrase condition="with_ifp">, ifp</phrase>
<phrase condition="have_systemd"> By default, all services are disabled and the administrator must enable the ones allowed to be used by executing: "systemctl enable sssd-@service@.socket". </phrase>
reconnection_retries (integer)
Number of times services should attempt to reconnect in the event of a Data Provider crash or restart before they give up
Default: 3
A domain is a database containing user information. SSSD can use more domains at the same time, but at least one must be configured or SSSD won't start. This parameter describes the list of domains in the order you want them to be queried. A domain name is recommended to contain only alphanumeric ASCII characters, dashes, dots and underscores. '/' character is forbidden.