diff options
| author | Pavel Reichl <preichl@redhat.com> | 2014-03-13 17:37:17 +0000 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-03-20 20:20:19 +0100 |
| commit | 13aea9c2b9c48dd614095b4551021868812ba2f0 (patch) | |
| tree | 01ecb5dbbecadbce98733b5008ebdd4e03bb2a39 /src | |
| parent | cc19cdd4a5e3d4cee851cdd44c1ab2568bf0af19 (diff) | |
| download | sssd-13aea9c2b9c48dd614095b4551021868812ba2f0.tar.gz sssd-13aea9c2b9c48dd614095b4551021868812ba2f0.tar.xz sssd-13aea9c2b9c48dd614095b4551021868812ba2f0.zip | |
MAN: minimal value expected for ldap_idmap_range_size
Resolves:
https://fedorahosted.org/sssd/ticket/1451
Reviewed-by: Stephen Gallagher <sgallagh@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/man/include/ldap_id_mapping.xml | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/src/man/include/ldap_id_mapping.xml b/src/man/include/ldap_id_mapping.xml index 64d2c159d..9a31c1568 100644 --- a/src/man/include/ldap_id_mapping.xml +++ b/src/man/include/ldap_id_mapping.xml @@ -170,6 +170,22 @@ ldap_schema = ad as it can. </para> <para> + NOTE: The value of this option must be at least as large as the + highest user RID planned for use on the Active Directory server. User + lookups and login will fail for any user whose RID is greater than + this value. + </para> + <para> + For example, if your most recently-added Active Directory user has + objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107, + <quote>ldap_idmap_range_size</quote> must be at least 1107. + </para> + <para> + It is important to plan ahead for future expansion, as changing this + value will result in changing all of the ID mappings on the system, + leading to users with different local IDs than they previously had. + </para> + <para> Default: 200000 </para> </listitem> |