summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDan Lavu <dlavu@redhat.com>2014-11-11 15:46:51 -0500
committerJakub Hrozek <jhrozek@redhat.com>2014-11-20 13:54:08 +0100
commit3cc9377bfce8bfda69244f7d79ce0062c60faa65 (patch)
treebe80145cfe3db22f4bfdb95a39029b03297d3822
parent6037341d6d77dc61b11d3d23944c615a96713353 (diff)
downloadsssd-3cc9377bfce8bfda69244f7d79ce0062c60faa65.tar.gz
sssd-3cc9377bfce8bfda69244f7d79ce0062c60faa65.tar.xz
sssd-3cc9377bfce8bfda69244f7d79ce0062c60faa65.zip
MAN: page edit for ldap_use_tokengroups
Resolves: https://fedorahosted.org/sssd/ticket/2448 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
-rw-r--r--src/man/sssd-ldap.5.xml12
1 files changed, 12 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index 557cafcb2..9436a28a0 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -2428,6 +2428,18 @@ ldap_access_filter = (employeeType=admin)
<term>ldap_group_search_base (string)</term>
<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/ldap_search_bases.xml" />
</varlistentry>
+ </variablelist>
+ <variablelist>
+ <note>
+ <para>
+ If the option <quote>ldap_use_tokengroups</quote> is
+ enabled. The searches against Active Directory will
+ not be restricted and return all groups memberships,
+ even with no gid mapping. It is recommended to disable
+ this feature, if group names are not being displayed
+ correctly.
+ </para>
+ </note>
<varlistentry>
<term>ldap_user_search_filter (string)</term>