From 0bc0e3ac6f74e0897e2cfe1e3481816a61c4976a Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Thu, 21 Mar 2013 11:49:59 +0100
Subject: Document what does access_provider=ad do

https://fedorahosted.org/sssd/ticket/1841
---
 src/man/sssd-ad.5.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 0d3f34890..0b1346bd9 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -243,6 +243,20 @@ chpass_provider = ad
 ad_server = dc1.example.com
 ad_hostname = client.example.com
 ad_domain = example.com
+</programlisting>
+        </para>
+    </refsect1>
+
+    <refsect1 id='notes'>
+        <title>NOTES</title>
+        <para>
+            The AD access control provider checks if the account is expired.
+            It has the same effect as the following configuration of the LDAP
+            provider:
+<programlisting>
+access_provider = ldap
+ldap_access_order = expire
+ldap_account_expire_policy = ad
 </programlisting>
         </para>
     </refsect1>
-- 
cgit