>From 9b9399b4a753af2a15ad41be1241f38d9b963c69 Mon Sep 17 00:00:00 2001 From: Dan Lavu Date: Tue, 11 Nov 2014 15:46:51 -0500 Subject: [PATCH] MAN: page edit for ldap_use_tokengroups Resolves: https://fedorahosted.org/sssd/ticket/2448 --- src/man/sssd-ldap.5.xml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index 557cafcb223a35f9dd61d9761bea29c75613c6c0..9436a28a0808836efcc71db2f0b4675989174ff3 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -2428,6 +2428,18 @@ ldap_access_filter = (employeeType=admin) ldap_group_search_base (string) + + + + + If the option ldap_use_tokengroups is + enabled. The searches against Active Directory will + not be restricted and return all groups memberships, + even with no gid mapping. It is recommended to disable + this feature, if group names are not being displayed + correctly. + + ldap_user_search_filter (string) -- 2.1.0