On (11/11/14 16:05), Dan Lavu wrote:
>I think this explains the feature better.
>
>From 0504e88c570f1f5a3957008041940c25555be43a Mon Sep 17 00:00:00 2001
>From: Dan Lavu <dlavu(a)redhat.com>
>Date: Tue, 11 Nov 2014 15:46:51 -0500
>Subject: [PATCH] Man page edit for ldap_use_tokengroups
>
https://fedorahosted.org/sssd/ticket/2448
>
>---
> src/man/sssd-ldap.5.xml | 13 ++++++++++++-
> 1 file changed, 12 insertions(+), 1 deletion(-)
>
>diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
>index 3f7d07a..168002d 100644
>--- a/src/man/sssd-ldap.5.xml
>+++ b/src/man/sssd-ldap.5.xml
>@@ -2454,7 +2454,18 @@ ldap_access_filter = (employeeType=admin)
> <term>ldap_group_search_base (string)</term>
> <xi:include
xmlns:xi="http://www.w3.org/2001/XInclude"
href="include/ldap_search_bases.xml" />
> </varlistentry>
>-
>+ </variablelist>
>+ <variablelist>
>+ <note>
>+ <para>
>+ If the option
<quote>ldap_use_tokengroups</quote> is
>+ enabled. The searches against Active Directory will
>+ not be restricted and return all groups memberships,
>+ even with no gid mapping. It is reccomended to disable
>+ this feature, if group names are not being displayed
>+ correctly.
>+ </para>
>+ </note>
> <varlistentry condition="with_sudo">
> <term>ldap_sudo_search_base (string)</term>
> <xi:include
xmlns:xi="http://www.w3.org/2001/XInclude"
href="include/ldap_search_bases.xml" />
>--
That's better :-)
I'm just attaching patch with shorter title in commit message.
Ticket URL need't be in title.
LS