summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-03-21 11:49:59 +0100
committerJakub Hrozek <jhrozek@redhat.com>2013-08-09 12:06:18 +0200
commit0bc0e3ac6f74e0897e2cfe1e3481816a61c4976a (patch)
tree2ace7d90dda724219982e82e966531525b315476
parent020104883d08343925c3cebbc716ac2bf4a90ce7 (diff)
downloadsssd-0bc0e3ac6f74e0897e2cfe1e3481816a61c4976a.tar.gz
sssd-0bc0e3ac6f74e0897e2cfe1e3481816a61c4976a.tar.xz
sssd-0bc0e3ac6f74e0897e2cfe1e3481816a61c4976a.zip
Document what does access_provider=ad dosssd-1.9.2-110.el6
https://fedorahosted.org/sssd/ticket/1841
-rw-r--r--src/man/sssd-ad.5.xml14
1 files changed, 14 insertions, 0 deletions
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 0d3f34890..0b1346bd9 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -247,6 +247,20 @@ ad_domain = example.com
</para>
</refsect1>
+ <refsect1 id='notes'>
+ <title>NOTES</title>
+ <para>
+ The AD access control provider checks if the account is expired.
+ It has the same effect as the following configuration of the LDAP
+ provider:
+<programlisting>
+access_provider = ldap
+ldap_access_order = expire
+ldap_account_expire_policy = ad
+</programlisting>
+ </para>
+ </refsect1>
+
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />
</refentry>