summaryrefslogtreecommitdiffstats
path: root/src/man
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2012-06-10 13:06:57 -0400
committerStephen Gallagher <sgallagh@redhat.com>2012-06-13 10:01:12 -0400
commit3963d3fa9e3099bc02d612b5051d8b769d6e3a75 (patch)
tree2012c21630ecf14bc54fe01543d1704f1de02d65 /src/man
parent94a104f808e76c19b33a3a63f3b637b1475d8c17 (diff)
downloadsssd_unused-3963d3fa9e3099bc02d612b5051d8b769d6e3a75.zip
sssd_unused-3963d3fa9e3099bc02d612b5051d8b769d6e3a75.tar.gz
sssd_unused-3963d3fa9e3099bc02d612b5051d8b769d6e3a75.tar.xz
LDAP: Add ldap_*_use_matching_rule_in_chain options
Diffstat (limited to 'src/man')
-rw-r--r--src/man/sssd-ldap.5.xml47
1 files changed, 47 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index de0fb5f..e04befd 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -831,6 +831,53 @@
</varlistentry>
<varlistentry>
+ <term>ldap_groups_use_matching_rule_in_chain</term>
+ <listitem>
+ <para>
+ This option tells SSSD to take advantage of an
+ Active Directory-specific feature which may speed
+ up group lookup operations on deployments with
+ complex or deep nested groups.
+ </para>
+ <para>
+ In most common cases, it is best to leave this
+ option disabled. It generally only provides a
+ performance increase on very complex nestings.
+ </para>
+ <para>
+ Note: This feature is currently known to work only
+ with Active Directory 2008 R1 and later. See
+ <ulink url="http://msdn.microsoft.com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx">
+ MSDN(TM) documentation</ulink> for more details.
+ </para>
+ <para>
+ Default: False
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term>ldap_initgroups_use_matching_rule_in_chain</term>
+ <listitem>
+ <para>
+ This option tells SSSD to take advantage of an
+ Active Directory-specific feature which will speed
+ up initgroups operations (most notably when
+ dealing with complex or deep nested groups).
+ </para>
+ <para>
+ Note: This feature is currently known to work only
+ with Active Directory 2008 R1 and later. See
+ <ulink url="http://msdn.microsoft.com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx">
+ MSDN(TM) documentation</ulink> for more details.
+ </para>
+ <para>
+ Default: False
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>ldap_netgroup_object_class (string)</term>
<listitem>
<para>