summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-03-21 11:49:59 +0100
committerJakub Hrozek <jhrozek@redhat.com>2013-03-21 19:53:13 +0100
commit6bd336bec70fbef75e2190c999ce89cc07489650 (patch)
tree469efbcee8e9df84f11ec3aa5442a6cfa83afc9c
parent8acdbd4063008395547ef5582e623683d34afe17 (diff)
downloadsssd-6bd336bec70fbef75e2190c999ce89cc07489650.tar.gz
sssd-6bd336bec70fbef75e2190c999ce89cc07489650.tar.xz
sssd-6bd336bec70fbef75e2190c999ce89cc07489650.zip
Document what does access_provider=ad do
https://fedorahosted.org/sssd/ticket/1841
-rw-r--r--src/man/sssd-ad.5.xml14
1 files changed, 14 insertions, 0 deletions
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 1570ed8a7..a628e0d66 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -248,6 +248,20 @@ ad_domain = example.com
</para>
</refsect1>
+ <refsect1 id='notes'>
+ <title>NOTES</title>
+ <para>
+ The AD access control provider checks if the account is expired.
+ It has the same effect as the following configuration of the LDAP
+ provider:
+<programlisting>
+access_provider = ldap
+ldap_access_order = expire
+ldap_account_expire_policy = ad
+</programlisting>
+ </para>
+ </refsect1>
+
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />
</refentry>