From 4b96f0cd6d075bc2aac18ba8368b65aaae41eb06 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Thu, 26 Sep 2013 22:08:15 +0200 Subject: MAN: Document that POSIX attributes must be replicated to GC Currently the AD provider relies on the presence of the POSIX attributes in the Global Catalog. This patch mentiones the fact in the sssd-ad(5) manual page. --- src/man/sssd-ad.5.xml | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'src') diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index 4a8c60b49..b05605aef 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -73,6 +73,11 @@ ldap_id_mapping = False + In order to retrieve users and groups using POSIX attributes from trusted + domains, the AD administrator must make sure that the POSIX attributes + are replicated to the Global Catalog. + + Users, groups and other entities served by SSSD are always treated as case-insensitive in the AD provider for compatibility with Active Directory's LDAP implementation. -- cgit