summaryrefslogtreecommitdiffstats
path: root/src/man/sssd-ldap.5.xml
diff options
context:
space:
mode:
authorJan Zeleny <jzeleny@redhat.com>2010-09-29 12:37:04 +0200
committerStephen Gallagher <sgallagh@redhat.com>2010-10-13 07:56:20 -0400
commit39b0adeaaf2429c7cbad045f7f8a79d51d02bee5 (patch)
treedc9e83062eb7a29fdaab535584b52e16c1799f84 /src/man/sssd-ldap.5.xml
parent3b1df539835367cb81cd5ff0f9959947d5642e55 (diff)
downloadsssd-39b0adeaaf2429c7cbad045f7f8a79d51d02bee5.tar.gz
sssd-39b0adeaaf2429c7cbad045f7f8a79d51d02bee5.tar.xz
sssd-39b0adeaaf2429c7cbad045f7f8a79d51d02bee5.zip
Man pages should mention supported providers
Each back end can support id, auth or access provider, but each back end supports different subset of these. Man pages should describe which providers are supported by each back end. Ticket: #615
Diffstat (limited to 'src/man/sssd-ldap.5.xml')
-rw-r--r--src/man/sssd-ldap.5.xml12
1 files changed, 7 insertions, 5 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index b32096dd9..402ab906f 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -35,11 +35,13 @@
You can configure SSSD to use more than one LDAP domain.
</para>
<para>
- If you want to authenticate against an LDAP server then TLS/SSL is
- required. <command>sssd</command> <emphasis>does not</emphasis>
- support authentication over an unencrypted channel. If the LDAP
- server is used only as an identify provider, an encrypted channel
- is not needed.
+ LDAP back end supports id, auth, access and chpass providers. If you want
+ to authenticate against an LDAP server either TLS/SSL, LDAPS, or
+ LDAP+GSSAPI is required. <command>sssd</command> <emphasis>does
+ not</emphasis> support authentication over an unencrypted channel.
+ If the LDAP server is used only as an identity provider, an encrypted
+ channel is not needed. Please refer to <quote>ldap_access_filter</quote>
+ config option for more information about using LDAP as an access provider.
</para>
</refsect1>