summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/man/sssd-ldap.5.xml6
1 files changed, 4 insertions, 2 deletions
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index 123ac3fac..66b9024bc 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -963,9 +963,11 @@
<para>
If ldap_group_nesting_level is set to 0 then no
nested groups are processed at all. However, when
- connected to Active-Directory Server 2008 and later
+ connected to Active-Directory Server 2008
+ and later using <quote>id_provider=ad</quote>
it is furthermore required to disable usage of
- Token-Groups by setting ldap_use_tokengroups to false.
+ Token-Groups by setting ldap_use_tokengroups
+ to false in order to restrict group nesting.
</para>
<para>
Default: 2