From 7678b7919e8f06176082d506885b8f85c4120c93 Mon Sep 17 00:00:00 2001
From: Dan Lavu <dlavu@redhat.com>
Date: Thu, 9 Oct 2014 08:56:35 -0400
Subject: [PATCH] Updated the sssd-ldap man page.

To address https://fedorahosted.org/sssd/ticket/2451 ,
added a note to the section and a full configuration
example at the bottom of the man page.
---
 src/man/sssd-ldap.5.xml | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
index 03ea7948b69ed28945fc614eee5c47195cd85937..15902aa9fd94c21d01db7fbce5699b6afb761be5 100644
--- a/src/man/sssd-ldap.5.xml
+++ b/src/man/sssd-ldap.5.xml
@@ -1941,7 +1941,8 @@ ldap_access_filter = (employeeType=admin)
                         </para>
                         <para>
                              Please note that it is a configuration error if a
-                             value is used more than once.
+                             value is used more than once or 'access_provider = ldap'
+                             is not used. 
                         </para>
                     </listitem>
                 </varlistentry>
@@ -2491,6 +2492,27 @@ ldap_access_filter = (employeeType=admin)
 </programlisting>
         </para>
     </refsect1>
+    <refsect1 id='ldap_access_filter example'>
+        <title>LDAP ACCESS FILTER EXAMPLE</title>
+        <para>
+            The following example assumes that SSSD is correctly
+            configured and to use the ldap_access_order=lockout. 
+        </para>
+        <para>
+<programlisting>
+    [domain/LDAP]
+    id_provider = ldap
+    auth_provider = ldap
+    access_provider = ldap
+    ldap_Access_order = lockout
+    ldap_pwdlockout_dn = cn=ppolicy,ou=policies,dc=example,dc=com 
+    ldap_uri = ldap://ldap.mydomain.org
+    ldap_search_base = dc=mydomain,dc=org
+    ldap_tls_reqcert = demand
+    cache_credentials = true
+</programlisting>
+        </para>
+    </refsect1>
 
     <refsect1 id='notes'>
         <title>NOTES</title>
-- 
1.9.3