<div dir="ltr">I think this explains the feature better. <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 10, 2014 at 4:53 AM, Jakub Hrozek <span dir="ltr"><<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Fri, Nov 07, 2014 at 02:56:05PM +0100, Lukas Slebodnik wrote:<br>
> ehlo,<br>
><br>
> I am opened to any better phrasing :-)<br>
><br>
> LS<br>
<br>
</div></div>> From 6672a9df8a090da3f8702f693a4257e7af803ac0 Mon Sep 17 00:00:00 2001<br>
> From: Lukas Slebodnik <<a href="mailto:lslebodn@redhat.com">lslebodn@redhat.com</a>><br>
> Date: Fri, 7 Nov 2014 14:19:54 +0100<br>
> Subject: [PATCH] MAN: Clarify usage of groups search base with tokengroups<br>
><br>
> Resolves:<br>
> <a href="https://fedorahosted.org/sssd/ticket/2448" target="_blank">https://fedorahosted.org/sssd/ticket/2448</a><br>
> ---<br>
> src/man/sssd-ldap.5.xml | 11 +++++++++++<br>
> 1 file changed, 11 insertions(+)<br>
><br>
> diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml<br>
> index 7c9335836c1208f381c5c9e12e3823641dd3e952..fbff7db7510fed07b02981aa1ce6475b2d13f556 100644<br>
> --- a/src/man/sssd-ldap.5.xml<br>
> +++ b/src/man/sssd-ldap.5.xml<br>
> @@ -2482,6 +2482,17 @@ ldap_access_filter = (employeeType=admin)<br>
> <term>ldap_group_search_base (string)</term><br>
> <xi:include xmlns:xi="<a href="http://www.w3.org/2001/XInclude" target="_blank">http://www.w3.org/2001/XInclude</a>" href="include/ldap_search_bases.xml" /><br>
> </varlistentry><br>
> + </variablelist><br>
> + <variablelist><br>
> + <note><br>
> + <para><br>
> + If the option <quote>ldap_use_tokengroups</quote> is<br>
> + enabled for searches against an Active Directory<br>
> + Server this option might not reduce groups<br>
<br>
reduce sounds confusing, maybe filter out? But I guess we need an<br>
opinion of a native speaker here..<br>
<br>
> + based on value of this option. It is recommended to<br>
> + disable token groups in such case.<br>
> + </para><br>
> + </note><br>
><br>
> <varlistentry condition="with_sudo"><br>
> <term>ldap_sudo_search_base (string)</term><br>
> --<br>
> 2.1.0<br>
><br>
<br>
> _______________________________________________<br>
> sssd-devel mailing list<br>
> <a href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
> <a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
<br>
_______________________________________________<br>
sssd-devel mailing list<br>
<a href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
</blockquote></div><br></div>