[SSSD] [PATCH] MAN: Clarify usage of groups search base with tokengroups

Dan Lavu side_control at runlevelone.net
Tue Nov 11 21:05:16 UTC 2014


I think this explains the feature better.

On Mon, Nov 10, 2014 at 4:53 AM, Jakub Hrozek <jhrozek at redhat.com> wrote:

> On Fri, Nov 07, 2014 at 02:56:05PM +0100, Lukas Slebodnik wrote:
> > ehlo,
> >
> > I am opened to any better phrasing :-)
> >
> > LS
>
> > From 6672a9df8a090da3f8702f693a4257e7af803ac0 Mon Sep 17 00:00:00 2001
> > From: Lukas Slebodnik <lslebodn at redhat.com>
> > Date: Fri, 7 Nov 2014 14:19:54 +0100
> > Subject: [PATCH] MAN: Clarify usage of groups search base with
> tokengroups
> >
> > Resolves:
> > https://fedorahosted.org/sssd/ticket/2448
> > ---
> >  src/man/sssd-ldap.5.xml | 11 +++++++++++
> >  1 file changed, 11 insertions(+)
> >
> > diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
> > index
> 7c9335836c1208f381c5c9e12e3823641dd3e952..fbff7db7510fed07b02981aa1ce6475b2d13f556
> 100644
> > --- a/src/man/sssd-ldap.5.xml
> > +++ b/src/man/sssd-ldap.5.xml
> > @@ -2482,6 +2482,17 @@ ldap_access_filter = (employeeType=admin)
> >                      <term>ldap_group_search_base (string)</term>
> >                      <xi:include xmlns:xi="
> http://www.w3.org/2001/XInclude" href="include/ldap_search_bases.xml" />
> >                  </varlistentry>
> > +            </variablelist>
> > +            <variablelist>
> > +                <note>
> > +                    <para>
> > +                        If the option
> <quote>ldap_use_tokengroups</quote> is
> > +                        enabled for searches against an Active Directory
> > +                        Server this option might not reduce groups
>
> reduce sounds confusing, maybe filter out? But I guess we need an
> opinion of a native speaker here..
>
> > +                        based on value of this option. It is
> recommended to
> > +                        disable token groups in such case.
> > +                    </para>
> > +                </note>
> >
> >                  <varlistentry condition="with_sudo">
> >                      <term>ldap_sudo_search_base (string)</term>
> > --
> > 2.1.0
> >
>
> > _______________________________________________
> > sssd-devel mailing list
> > sssd-devel at lists.fedorahosted.org
> > https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20141111/7d51bb53/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Man-page-edit-for-ldap_use_tokengroups.patch
Type: text/x-patch
Size: 1611 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20141111/7d51bb53/attachment.bin>


More information about the sssd-devel mailing list