summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPavel Reichl <preichl@redhat.com>2015-03-26 12:38:32 -0400
committerJakub Hrozek <jhrozek@redhat.com>2015-03-27 16:24:09 +0100
commit1426ee8756a1df4ec0651417dce92e1dcc8a246d (patch)
tree67683d5d23050af21d324582548a03c9548a7960
parentc2cb78c264ecf50d3a621ef16d1fe8026a39d135 (diff)
downloadsssd-1426ee8756a1df4ec0651417dce92e1dcc8a246d.tar.gz
sssd-1426ee8756a1df4ec0651417dce92e1dcc8a246d.tar.xz
sssd-1426ee8756a1df4ec0651417dce92e1dcc8a246d.zip
MAN: Update ppolicy description
Resolves: https://fedorahosted.org/sssd/ticket/2612 Reviewed-by: Stephen Gallagher <sgallagh@redhat.com>
-rw-r--r--src/man/sssd-ldap.5.xml11
1 files changed, 7 insertions, 4 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index 6088a1286..83ec9b668 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -1962,11 +1962,14 @@ ldap_access_filter = (employeeType=admin)
If set, this option denies access in case that ldap
attribute 'pwdAccountLockedTime' is present and has
value of '000001010000Z' or represents any time in the past.
- The value of 'pwdAccountLockedTime' attribute
- must end with 'Z' as only UTC time zone is
- currently suported. Please see the option
- ldap_pwdlockout_dn.
+ The value of the 'pwdAccountLockedTime' attribute
+ must end with 'Z', which denotes the UTC time zone.
+ Other time zones are not currently supported and
+ will result in "access-denied" when users attempt
+ to log in.
+
+ Please see the option ldap_pwdlockout_dn.
Please note that 'access_provider = ldap' must
be set for this feature to work.
</para>