diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2012-06-10 13:06:57 -0400 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2012-06-13 10:01:12 -0400 |
| commit | 3963d3fa9e3099bc02d612b5051d8b769d6e3a75 (patch) | |
| tree | 2012c21630ecf14bc54fe01543d1704f1de02d65 /src/man | |
| parent | 94a104f808e76c19b33a3a63f3b637b1475d8c17 (diff) | |
| download | sssd-3963d3fa9e3099bc02d612b5051d8b769d6e3a75.tar.gz sssd-3963d3fa9e3099bc02d612b5051d8b769d6e3a75.tar.xz sssd-3963d3fa9e3099bc02d612b5051d8b769d6e3a75.zip | |
LDAP: Add ldap_*_use_matching_rule_in_chain options
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/sssd-ldap.5.xml | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index de0fb5f61..e04befdba 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -831,6 +831,53 @@ </varlistentry> <varlistentry> + <term>ldap_groups_use_matching_rule_in_chain</term> + <listitem> + <para> + This option tells SSSD to take advantage of an + Active Directory-specific feature which may speed + up group lookup operations on deployments with + complex or deep nested groups. + </para> + <para> + In most common cases, it is best to leave this + option disabled. It generally only provides a + performance increase on very complex nestings. + </para> + <para> + Note: This feature is currently known to work only + with Active Directory 2008 R1 and later. See + <ulink url="http://msdn.microsoft.com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx"> + MSDN(TM) documentation</ulink> for more details. + </para> + <para> + Default: False + </para> + </listitem> + </varlistentry> + + <varlistentry> + <term>ldap_initgroups_use_matching_rule_in_chain</term> + <listitem> + <para> + This option tells SSSD to take advantage of an + Active Directory-specific feature which will speed + up initgroups operations (most notably when + dealing with complex or deep nested groups). + </para> + <para> + Note: This feature is currently known to work only + with Active Directory 2008 R1 and later. See + <ulink url="http://msdn.microsoft.com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx"> + MSDN(TM) documentation</ulink> for more details. + </para> + <para> + Default: False + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>ldap_netgroup_object_class (string)</term> <listitem> <para> |