diff options
| -rw-r--r-- | src/man/sssd.conf.5.xml | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml index 5a7bdc91b..573f421a7 100644 --- a/src/man/sssd.conf.5.xml +++ b/src/man/sssd.conf.5.xml @@ -590,6 +590,14 @@ subdomain_inherit = ldap_purge_cache_timeout to filter only users from the particular domain. </para> <para> + NOTE: The filter_groups option doesn't affect + inheritance of nested group members, since + filtering happens after they are propagated for + returning via NSS. E.g. a group having a member + group filtered out will still have the member + users of the latter listed. + </para> + <para> Default: root </para> </listitem> |