diff options
| author | Dan Lavu <dlavu@redhat.com> | 2014-11-11 15:46:51 -0500 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-11-19 23:39:43 +0100 |
| commit | 02011187307ce97d1f41810288b617682a1f311a (patch) | |
| tree | 00035524eaded75dac068800d0d0ff79a7baf619 | |
| parent | 10d571677bf11c8b2c357026f24de40cae3094f5 (diff) | |
| download | sssd-02011187307ce97d1f41810288b617682a1f311a.tar.gz sssd-02011187307ce97d1f41810288b617682a1f311a.tar.xz sssd-02011187307ce97d1f41810288b617682a1f311a.zip | |
MAN: page edit for ldap_use_tokengroups
Resolves:
https://fedorahosted.org/sssd/ticket/2448
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
| -rw-r--r-- | src/man/sssd-ldap.5.xml | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index d7a2a4ac9..5b36f69a6 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -2482,7 +2482,18 @@ ldap_access_filter = (employeeType=admin) <term>ldap_group_search_base (string)</term> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/ldap_search_bases.xml" /> </varlistentry> - + </variablelist> + <variablelist> + <note> + <para> + If the option <quote>ldap_use_tokengroups</quote> is + enabled. The searches against Active Directory will + not be restricted and return all groups memberships, + even with no gid mapping. It is recommended to disable + this feature, if group names are not being displayed + correctly. + </para> + </note> <varlistentry condition="with_sudo"> <term>ldap_sudo_search_base (string)</term> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/ldap_search_bases.xml" /> |