>From 51e5632c5eb7f1325093a3cf2cc98646643c0a0e Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Thu, 26 Sep 2013 22:08:15 +0200 Subject: [PATCH 4/4] MAN: Document that POSIX attributes must be replicated to GC Currently the AD provider relies on the presence of the POSIX attributes in the Global Catalog. This patch mentiones the fact in the sssd-ad(5) manual page. --- src/man/sssd-ad.5.xml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index ce5602b8c1b4a629412ba2ce45a229c48f392bf6..bae9d003d49c2c4d68a3bda176046e818090b3c7 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -73,6 +73,11 @@ ldap_id_mapping = False + In order to retrieve users and groups using POSIX attributes from trusted + domains, the AD administrator must make sure that the POSIX attributes + are replicated to the Global Catalog. + + Users, groups and other entities served by SSSD are always treated as case-insensitive in the AD provider for compatibility with Active Directory's LDAP implementation. -- 1.8.3.1