summaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorPavel Reichl <preichl@redhat.com>2014-05-21 09:30:13 +0100
committerJakub Hrozek <jhrozek@redhat.com>2014-06-02 18:54:32 +0200
commit4221bd76e2b631684f2dc7e8c625fd7b27947cf8 (patch)
treed97251c89e455a46ed869f8a4dfd98c9ab2cf7d3 /src/man
parent98052f6f186f27a6fde4786274132a6bb4d69e79 (diff)
downloadsssd-4221bd76e2b631684f2dc7e8c625fd7b27947cf8.tar.gz
sssd-4221bd76e2b631684f2dc7e8c625fd7b27947cf8.tar.xz
sssd-4221bd76e2b631684f2dc7e8c625fd7b27947cf8.zip
SDAP: Add option to disable use of Token-Groups
Disabling use of Token-Groups is mandatory if expansion of nested groups is not desired (ldap_group_nesting_level = 0) for AD provider. Resolves: https://fedorahosted.org/sssd/ticket/2294 Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> (cherry picked from commit 69994add9cd4e57d40b3b7a0b1783ef2d0aa974c)
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd-ldap.5.xml14
1 files changed, 14 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index 9c3eae07f..06511d202 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -961,6 +961,20 @@
</varlistentry>
<varlistentry>
+ <term>ldap_use_tokengroups</term>
+ <listitem>
+ <para>
+ This options enables or disables use of Token-Groups
+ attribute when performing initgroup for users from
+ Active Directory Server 2008 and later.
+ </para>
+ <para>
+ Default: True
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>ldap_netgroup_object_class (string)</term>
<listitem>
<para>