diff options
author | Pavel Reichl <preichl@redhat.com> | 2014-08-01 17:04:55 +0100 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-08-19 17:50:48 +0200 |
commit | d05c149a70fedcd6bb9932b6dc1bf0bcff350006 (patch) | |
tree | 6a71383e1857256ecba3d81f5643d96b062c3c8e | |
parent | 021dad025247ff488c269669e3a1660302bfcbf6 (diff) | |
download | sssd-d05c149a70fedcd6bb9932b6dc1bf0bcff350006.tar.gz sssd-d05c149a70fedcd6bb9932b6dc1bf0bcff350006.tar.xz sssd-d05c149a70fedcd6bb9932b6dc1bf0bcff350006.zip |
MAN: options 'lockout' and 'ldap_pwdlockout_dn'
Resolves:
https://fedorahosted.org/sssd/ticket/2364
-rw-r--r-- | src/man/sssd-ldap.5.xml | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index c808033a1..ecbf2f54c 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -1907,6 +1907,13 @@ ldap_access_filter = (employeeType=admin) <emphasis>filter</emphasis>: use ldap_access_filter </para> <para> + <emphasis>lockout</emphasis>: use account locking. + If set, this option denies access in case that ldap + attribute 'pwdAccountLockedTime' is present and has + value of '000001010000Z'. Please see the option + ldap_pwdlockout_dn. + </para> + <para> <emphasis>expire</emphasis>: use ldap_account_expire_policy </para> @@ -1930,6 +1937,26 @@ ldap_access_filter = (employeeType=admin) </varlistentry> <varlistentry> + <term>ldap_pwdlockout_dn (string)</term> + <listitem> + <para> + This option specifies the DN of password policy entry + on LDAP server. Please note that absence of this + option in sssd.conf in case of enabled account + lockout checking will yield access denied as + ppolicy attributes on LDAP server cannot be checked + properly. + </para> + <para> + Example: cn=ppolicy,ou=policies,dc=example,dc=com + </para> + <para> + Default: cn=ppolicy,ou=policies,$ldap_search_base + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>ldap_deref (string)</term> <listitem> <para> |