From e4ae14ff4b2b37ce2e356a77c687e33e6d5a2b33 Mon Sep 17 00:00:00 2001
From: Jan Zeleny <jzeleny@redhat.com>
Date: Fri, 13 Jan 2012 06:48:45 -0500
Subject: Add info about ipa_host_search_base to man page

Also add comment that setting ipa_hbac_support_srchost to False disables
search filters given in ipa_host_search_base
---
 src/man/sssd-ipa.5.xml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

(limited to 'src')

diff --git a/src/man/sssd-ipa.5.xml b/src/man/sssd-ipa.5.xml
index d85ae86c8..8d0796afd 100644
--- a/src/man/sssd-ipa.5.xml
+++ b/src/man/sssd-ipa.5.xml
@@ -147,6 +147,30 @@
                     </listitem>
                 </varlistentry>
 
+                <varlistentry>
+                    <term>ipa_host_search_base (string)</term>
+                    <listitem>
+                        <para>
+                            Optional. Use the given string as search base for
+                            host objects.
+                        </para>
+                        <para>
+                            See <quote>ldap_search_base</quote> for
+                            information about configuring multiple search
+                            bases.
+                        </para>
+                        <para>
+                            If filter is given in any of search bases and
+                            <emphasis>ipa_hbac_support_srchost</emphasis>
+                            is set to False, the filter will be ignored.
+                        </para>
+                        <para>
+                            Default: the value of
+                            <emphasis>ldap_search_base</emphasis>
+                        </para>
+                    </listitem>
+                </varlistentry>
+
                 <varlistentry>
                     <term>krb5_validate (boolean)</term>
                     <listitem>
@@ -244,6 +268,11 @@
                             If this is set to false, then srchost as given
                             to SSSD by PAM will be ignored.
                         </para>
+                        <para>
+                            Note that if set to <emphasis>False</emphasis>,
+                            this option casuses filters given in
+                            <emphasis>ipa_host_search_base</emphasis> to be ignored;
+                        </para>
                         <para>
                             Default: false
                         </para>
-- 
cgit