diff options
| author | Pavel Reichl <preichl@redhat.com> | 2014-08-01 17:04:55 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-08-27 15:54:19 +0200 |
| commit | c4998e7f6dd144e61c99466da6ea1c1893b942f8 (patch) | |
| tree | 8457a9c9571eaa82f92308c709fc04751e9ee99f | |
| parent | 54164c88cfb48c24783665b3988c1a61caa81882 (diff) | |
| download | sssd-c4998e7f6dd144e61c99466da6ea1c1893b942f8.tar.gz sssd-c4998e7f6dd144e61c99466da6ea1c1893b942f8.tar.xz sssd-c4998e7f6dd144e61c99466da6ea1c1893b942f8.zip | |
MAN: options 'lockout' and 'ldap_pwdlockout_dn'
Resolves:
https://fedorahosted.org/sssd/ticket/2364
| -rw-r--r-- | src/man/sssd-ldap.5.xml | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index c808033a1..ecbf2f54c 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -1907,6 +1907,13 @@ ldap_access_filter = (employeeType=admin) <emphasis>filter</emphasis>: use ldap_access_filter </para> <para> + <emphasis>lockout</emphasis>: use account locking. + If set, this option denies access in case that ldap + attribute 'pwdAccountLockedTime' is present and has + value of '000001010000Z'. Please see the option + ldap_pwdlockout_dn. + </para> + <para> <emphasis>expire</emphasis>: use ldap_account_expire_policy </para> @@ -1930,6 +1937,26 @@ ldap_access_filter = (employeeType=admin) </varlistentry> <varlistentry> + <term>ldap_pwdlockout_dn (string)</term> + <listitem> + <para> + This option specifies the DN of password policy entry + on LDAP server. Please note that absence of this + option in sssd.conf in case of enabled account + lockout checking will yield access denied as + ppolicy attributes on LDAP server cannot be checked + properly. + </para> + <para> + Example: cn=ppolicy,ou=policies,dc=example,dc=com + </para> + <para> + Default: cn=ppolicy,ou=policies,$ldap_search_base + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>ldap_deref (string)</term> <listitem> <para> |