diff options
| author | Pavel Reichl <preichl@redhat.com> | 2014-05-12 22:45:00 +0000 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-06-02 15:24:39 +0200 |
| commit | 3c1899348804713b49ba9c1f2bc782892c47c2fa (patch) | |
| tree | af3524d059a7cc0d73823cc2f11db295247fe96a | |
| parent | b51646c8a3a35a2728f32819a8fdeef822ff1ff2 (diff) | |
| download | sssd-3c1899348804713b49ba9c1f2bc782892c47c2fa.tar.gz sssd-3c1899348804713b49ba9c1f2bc782892c47c2fa.tar.xz sssd-3c1899348804713b49ba9c1f2bc782892c47c2fa.zip | |
MAN: Detailed ldap_group_nesting_level option
Resolves:
https://fedorahosted.org/sssd/ticket/2294
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
| -rw-r--r-- | src/man/sssd-ldap.5.xml | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index 6426fe4fc..3738dc3ba 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -928,6 +928,22 @@ RFC2307 schema. </para> <para> + Note: This option specifies the guaranteed level of + nested groups to be processed for any lookup. However, + nested groups beyond this limit + <emphasis>may be</emphasis> returned if previous + lookups already resolved the deeper nesting levels. + Also, subsequent lookups for other groups may enlarge + the result set for original lookup if re-queried. + </para> + <para> + If ldap_group_nesting_level is set to 0 then no + nested groups are processed at all. However, when + connected to Active-Directory Server 2008 and later + it is furthermore required to disable usage of + Token-Groups by setting ldap_use_tokengroups to false. + </para> + <para> Default: 2 </para> </listitem> |