summaryrefslogtreecommitdiffstats
path: root/src/man/sssd.conf.5.xml
diff options
context:
space:
mode:
Diffstat (limited to 'src/man/sssd.conf.5.xml')
-rw-r--r--src/man/sssd.conf.5.xml35
1 files changed, 34 insertions, 1 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index ef7490d94..a7691edcc 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -632,7 +632,17 @@
warning.
</para>
<para>
- Default: 7
+ If zero is set, then this filter is not applied,
+ i.e. if the expiration warning was received from
+ backend server, it will automatically be displayed.
+ </para>
+ <para>
+ This setting can be overridden by setting
+ <emphasis>pwd_expiration_warning</emphasis>
+ for a particular domain.
+ </para>
+ <para>
+ Default: 0
</para>
</listitem>
</varlistentry>
@@ -922,6 +932,29 @@
</para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>pwd_expiration_warning (integer)</term>
+ <listitem>
+ <para>
+ Display a warning N days before the password expires.
+ </para>
+ <para>
+ If zero is set, then this filter is not applied,
+ i.e. if the expiration warning was received from
+ backend server, it will automatically be displayed.
+ </para>
+ <para>
+ Please note that the backend server has to provide
+ information about the expiration time of the password.
+ If this information is missing, sssd cannot display a
+ warning. Also an auth provider has to be configured for
+ the backend.
+ </para>
+ <para>
+ Default: 7 (Kerberos), 0 (LDAP)
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
<term>id_provider (string)</term>