[SSSD] [PATCH] Document what does access_provider=ad do

Jakub Hrozek jhrozek at redhat.com
Thu Mar 21 10:53:32 UTC 2013


I've had two different users asking this question this week.

https://fedorahosted.org/sssd/ticket/1841
-------------- next part --------------
>From 800ae9cae49c91dd9cd946654b0996762486cc48 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Thu, 21 Mar 2013 11:49:59 +0100
Subject: [PATCH] Document what does access_provider=ad do

https://fedorahosted.org/sssd/ticket/1841
---
 src/man/sssd-ad.5.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 1570ed8a7413967616e60894985844f0fdd74614..927a4831ff35547e983254dd306ae3068b2c835a 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -248,6 +248,20 @@ ad_domain = example.com
         </para>
     </refsect1>
 
+    <refsect1 id='notes'>
+        <title>NOTES</title>
+        <para>
+            The AD access control provider checks if the account is expired. 
+            It has the same effect as the following configuration of the LDAP
+            provider:
+<programlisting>
+access_provider=ldap
+ldap_access_order = expire
+ldap_account_expire_policy = ad
+</programlisting>
+        </para>
+    </refsect1>
+
 	<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />
 
 </refentry>
-- 
1.8.1.4



More information about the sssd-devel mailing list