diff options
Diffstat (limited to 'src/man')
-rw-r--r-- | src/man/sssd-ldap.5.xml | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index d7a2a4ac9..5b36f69a6 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -2482,7 +2482,18 @@ ldap_access_filter = (employeeType=admin) <term>ldap_group_search_base (string)</term> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/ldap_search_bases.xml" /> </varlistentry> - + </variablelist> + <variablelist> + <note> + <para> + If the option <quote>ldap_use_tokengroups</quote> is + enabled. The searches against Active Directory will + not be restricted and return all groups memberships, + even with no gid mapping. It is recommended to disable + this feature, if group names are not being displayed + correctly. + </para> + </note> <varlistentry condition="with_sudo"> <term>ldap_sudo_search_base (string)</term> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/ldap_search_bases.xml" /> |