man: add details about 'an2ln' #8396
Open
+18
−0
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
The pull request effectively updates the sssd_krb5_localauth_plugin.8.xml man page to reflect the recent security fix related to the an2ln module. The added details clearly explain why an2ln is disabled in certain SSSD configurations and the potential security implications of name collisions. It also clarifies the behavior when auth_provider = krb5 is used. The documentation is clear, concise, and provides valuable information to users regarding this change.
alexey-tikhonov
added
Bugzilla
backport-to-sssd-2-9
backport-to-sssd-2-12
backport-to-sssd-2-9-4
sumit-bose
force-pushed
the
man_localauth_an2ln
branch
from
b353cfc to
08dd2da
Compare
alexey-tikhonov
approved these changes
Jan 23, 2026
justin-stephenson
approved these changes
Jan 23, 2026
With a recent security fix the 'an2ln' module was disabled in SSSD's configuration snippet for the localauth configuration of libkrb5. With this patch the related man page is update accordingly. Reviewed-by: Alexey Tikhonov <atikhono@redhat.com> Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Contributor
sssd-bot
force-pushed
the
man_localauth_an2ln
branch
from
08dd2da to
5a6ce36
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
With a recent security fix the 'an2ln' module was disabled in SSSD's configuration snippet for the localauth configuration of libkrb5. With this patch the related man page is update accordingly.