summaryrefslogtreecommitdiffstats
path: root/src/man/sssd-ldap.5.xml
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/sssd-ldap.5.xml')
-rw-r--r--src/man/sssd-ldap.5.xml35
1 files changed, 35 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index 87d388ade..8c38ca769 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -990,6 +990,41 @@ ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>ldap_deref (string)</term>
+ <listitem>
+ <para>
+ Specifies how alias dereferencing is done when
+ performing a search. The following options are
+ allowed:
+ </para>
+ <para>
+ <emphasis>never</emphasis>: Aliases are never
+ dereferenced.
+ </para>
+ <para>
+ <emphasis>searching</emphasis>: Aliases are
+ dereferenced in subordinates of the base object,
+ but not in locating the base object of the search.
+ </para>
+ <para>
+ <emphasis>finding</emphasis>: Aliases are only
+ dereferenced when locating the base object of the
+ search.
+ </para>
+ <para>
+ <emphasis>always</emphasis>: Aliases are
+ dereferenced both in searching and in locating the
+ base object of the search.
+ </para>
+ <para>
+ Default: Empty (this is handled as
+ <emphasis>never</emphasis> by the LDAP client
+ libraries)
+ </para>
+ </listitem>
+ </varlistentry>
+
</variablelist>
</para>
</refsect1>