From 3963d3fa9e3099bc02d612b5051d8b769d6e3a75 Mon Sep 17 00:00:00 2001 From: Stephen Gallagher Date: Sun, 10 Jun 2012 13:06:57 -0400 Subject: LDAP: Add ldap_*_use_matching_rule_in_chain options --- src/man/sssd-ldap.5.xml | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) (limited to 'src/man') diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index de0fb5f6..e04befdb 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -830,6 +830,53 @@ + + ldap_groups_use_matching_rule_in_chain + + + This option tells SSSD to take advantage of an + Active Directory-specific feature which may speed + up group lookup operations on deployments with + complex or deep nested groups. + + + In most common cases, it is best to leave this + option disabled. It generally only provides a + performance increase on very complex nestings. + + + Note: This feature is currently known to work only + with Active Directory 2008 R1 and later. See + + MSDN(TM) documentation for more details. + + + Default: False + + + + + + ldap_initgroups_use_matching_rule_in_chain + + + This option tells SSSD to take advantage of an + Active Directory-specific feature which will speed + up initgroups operations (most notably when + dealing with complex or deep nested groups). + + + Note: This feature is currently known to work only + with Active Directory 2008 R1 and later. See + + MSDN(TM) documentation for more details. + + + Default: False + + + + ldap_netgroup_object_class (string) -- cgit