diff options
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/sssd-ldap.5.xml | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index de0fb5f6..e04befdb 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -831,6 +831,53 @@ </varlistentry> <varlistentry> + <term>ldap_groups_use_matching_rule_in_chain</term> + <listitem> + <para> + This option tells SSSD to take advantage of an + Active Directory-specific feature which may speed + up group lookup operations on deployments with + complex or deep nested groups. + </para> + <para> + In most common cases, it is best to leave this + option disabled. It generally only provides a + performance increase on very complex nestings. + </para> + <para> + Note: This feature is currently known to work only + with Active Directory 2008 R1 and later. See + <ulink url="http://msdn.microsoft.com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx"> + MSDN(TM) documentation</ulink> for more details. + </para> + <para> + Default: False + </para> + </listitem> + </varlistentry> + + <varlistentry> + <term>ldap_initgroups_use_matching_rule_in_chain</term> + <listitem> + <para> + This option tells SSSD to take advantage of an + Active Directory-specific feature which will speed + up initgroups operations (most notably when + dealing with complex or deep nested groups). + </para> + <para> + Note: This feature is currently known to work only + with Active Directory 2008 R1 and later. See + <ulink url="http://msdn.microsoft.com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx"> + MSDN(TM) documentation</ulink> for more details. + </para> + <para> + Default: False + </para> + </listitem> + </varlistentry> + + <varlistentry> <term>ldap_netgroup_object_class (string)</term> <listitem> <para> |