summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-03-21 11:49:59 +0100
committerJakub Hrozek <jhrozek@redhat.com>2013-03-21 19:49:03 +0100
commitd231e95b0a5e1bd377f67e041e8b502a79fdc605 (patch)
treea3518d74303a8c6c4120b5db8d310beac0a7e0f7
parent4709ff46db0dbe073aef061b796d2fd7adeaf18f (diff)
downloadsssd-d231e95b0a5e1bd377f67e041e8b502a79fdc605.tar.gz
sssd-d231e95b0a5e1bd377f67e041e8b502a79fdc605.tar.xz
sssd-d231e95b0a5e1bd377f67e041e8b502a79fdc605.zip
Document what does access_provider=ad do
https://fedorahosted.org/sssd/ticket/1841
-rw-r--r--src/man/sssd-ad.5.xml14
1 files changed, 14 insertions, 0 deletions
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 1570ed8a7..a628e0d66 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -248,6 +248,20 @@ ad_domain = example.com
</para>
</refsect1>
+ <refsect1 id='notes'>
+ <title>NOTES</title>
+ <para>
+ The AD access control provider checks if the account is expired.
+ It has the same effect as the following configuration of the LDAP
+ provider:
+<programlisting>
+access_provider = ldap
+ldap_access_order = expire
+ldap_account_expire_policy = ad
+</programlisting>
+ </para>
+ </refsect1>
+
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />
</refentry>