>From 6651792e39fc19bdcbf1f5f3197cb2ccc09d68f6 Mon Sep 17 00:00:00 2001 From: Dan Lavu Date: Tue, 11 Nov 2014 15:46:51 -0500 Subject: [PATCH] MAN: page edit for ldap_use_tokengroups Resolves: https://fedorahosted.org/sssd/ticket/2448 --- src/man/sssd-ldap.5.xml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index d7a2a4ac9fa2497a4c347a2a7e77703e53b8a46c..5b36f69a679a1362290d8fea1f4c8fc29cc548d8 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -2482,7 +2482,18 @@ ldap_access_filter = (employeeType=admin) ldap_group_search_base (string) - + + + + + If the option ldap_use_tokengroups is + enabled. The searches against Active Directory will + not be restricted and return all groups memberships, + even with no gid mapping. It is recommended to disable + this feature, if group names are not being displayed + correctly. + + ldap_sudo_search_base (string) -- 2.1.0