From 3b4f269a576e4008e4277ab432a02543a696b961 Mon Sep 17 00:00:00 2001
From: Alexey Tikhonov <atikhono@redhat.com>
Date: Mon, 20 Apr 2020 14:11:14 +0200
Subject: [PATCH] MAN: fixed description of pam_cert_db_path

Part about "PKCS#11 modules" only applies to NSS version.
---
 src/man/sssd.conf.5.xml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
index a2567f5acb..12c5ce14e6 100644
--- a/src/man/sssd.conf.5.xml
+++ b/src/man/sssd.conf.5.xml
@@ -1446,15 +1446,17 @@ pam_account_locked_message = Account locked, please contact help desk.
                     <term>pam_cert_db_path (string)</term>
                     <listitem>
                         <para>
-                            The path to the certificate database which contain
-                            the PKCS#11 modules to access the Smartcard.
+                            The path to the certificate database.
                         </para>
                         <para>
                             Default:
                             <itemizedlist>
                                 <listitem><para>/etc/pki/nssdb (NSS version,
-                                                path to a NSS
-                                                database)</para></listitem>
+                                                path to a NSS database which
+                                                contains the PKCS#11 modules
+                                                to access the Smartcard and
+                                                the trusted CA certificates)
+                                                </para></listitem>
                                 <listitem><para>/etc/sssd/pki/sssd_auth_ca_db.pem
                                                 (OpenSSL version, path to a file
                                                 with trusted CA certificates in
