<div dir="ltr">I think this explains the feature better. <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 10, 2014 at 4:53 AM, Jakub Hrozek <span dir="ltr">&lt;<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Fri, Nov 07, 2014 at 02:56:05PM +0100, Lukas Slebodnik wrote:<br>
&gt; ehlo,<br>
&gt;<br>
&gt; I am opened to any better phrasing :-)<br>
&gt;<br>
&gt; LS<br>
<br>
</div></div>&gt; From 6672a9df8a090da3f8702f693a4257e7af803ac0 Mon Sep 17 00:00:00 2001<br>
&gt; From: Lukas Slebodnik &lt;<a href="mailto:lslebodn@redhat.com">lslebodn@redhat.com</a>&gt;<br>
&gt; Date: Fri, 7 Nov 2014 14:19:54 +0100<br>
&gt; Subject: [PATCH] MAN: Clarify usage of groups search base with tokengroups<br>
&gt;<br>
&gt; Resolves:<br>
&gt; <a href="https://fedorahosted.org/sssd/ticket/2448" target="_blank">https://fedorahosted.org/sssd/ticket/2448</a><br>
&gt; ---<br>
&gt;  src/man/sssd-ldap.5.xml | 11 +++++++++++<br>
&gt;  1 file changed, 11 insertions(+)<br>
&gt;<br>
&gt; diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml<br>
&gt; index 7c9335836c1208f381c5c9e12e3823641dd3e952..fbff7db7510fed07b02981aa1ce6475b2d13f556 100644<br>
&gt; --- a/src/man/sssd-ldap.5.xml<br>
&gt; +++ b/src/man/sssd-ldap.5.xml<br>
&gt; @@ -2482,6 +2482,17 @@ ldap_access_filter = (employeeType=admin)<br>
&gt;                      &lt;term&gt;ldap_group_search_base (string)&lt;/term&gt;<br>
&gt;                      &lt;xi:include xmlns:xi=&quot;<a href="http://www.w3.org/2001/XInclude" target="_blank">http://www.w3.org/2001/XInclude</a>&quot; href=&quot;include/ldap_search_bases.xml&quot; /&gt;<br>
&gt;                  &lt;/varlistentry&gt;<br>
&gt; +            &lt;/variablelist&gt;<br>
&gt; +            &lt;variablelist&gt;<br>
&gt; +                &lt;note&gt;<br>
&gt; +                    &lt;para&gt;<br>
&gt; +                        If the option &lt;quote&gt;ldap_use_tokengroups&lt;/quote&gt; is<br>
&gt; +                        enabled for searches against an Active Directory<br>
&gt; +                        Server this option might not reduce groups<br>
<br>
reduce sounds confusing, maybe filter out? But I guess we need an<br>
opinion of a native speaker here..<br>
<br>
&gt; +                        based on value of this option. It is recommended to<br>
&gt; +                        disable token groups in such case.<br>
&gt; +                    &lt;/para&gt;<br>
&gt; +                &lt;/note&gt;<br>
&gt;<br>
&gt;                  &lt;varlistentry condition=&quot;with_sudo&quot;&gt;<br>
&gt;                      &lt;term&gt;ldap_sudo_search_base (string)&lt;/term&gt;<br>
&gt; --<br>
&gt; 2.1.0<br>
&gt;<br>
<br>
&gt; _______________________________________________<br>
&gt; sssd-devel mailing list<br>
&gt; <a href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
&gt; <a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
<br>
_______________________________________________<br>
sssd-devel mailing list<br>
<a href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
</blockquote></div><br></div>