>From 1facb0cd409499a6aeb61be7080cd3cf88594383 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Fri, 12 Jul 2013 16:41:49 +0200
Subject: [PATCH 1/3] MAN: clarify the default access provider for AD

https://fedorahosted.org/sssd/ticket/1965

After we added a section that clarified what access_provider=ad did,
some users were confused and thought that "ad" was also the default
access provider if "id_provider=ad" was specified.
---
 src/man/sssd-ad.5.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index b252d9394055cbd9a7e1a8b08ab81624362e13c9..fef7a2d827118dec9c4dcba6cb2ece82daba4a86 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -319,6 +319,11 @@ ldap_access_order = expire
 ldap_account_expire_policy = ad
 </programlisting>
         </para>
+        <para>
+            However, unless the <quote>ad</quote> access control provider
+            is explicitly configured, the default access provider is
+            <quote>permit</quote>.
+        </para>
     </refsect1>
 
 	<xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />
-- 
1.8.3.1