summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2013-09-26 22:08:15 +0200
committerJakub Hrozek <jhrozek@redhat.com>2013-09-27 15:52:14 +0200
commit4343b618051d295cbb1a805a85feb117a91c6945 (patch)
treeb1541d5a19dfaecf4832c7545d84a06b4afeaf94 /src
parentc2aeea38addda1a07e60adbc3451f11b640f7bf1 (diff)
downloadsssd-4343b618051d295cbb1a805a85feb117a91c6945.tar.gz
sssd-4343b618051d295cbb1a805a85feb117a91c6945.tar.bz2
sssd-4343b618051d295cbb1a805a85feb117a91c6945.zip
MAN: Document that POSIX attributes must be replicated to GC
Currently the AD provider relies on the presence of the POSIX attributes in the Global Catalog. This patch mentiones the fact in the sssd-ad(5) manual page.
Diffstat (limited to 'src')
-rw-r--r--src/man/sssd-ad.5.xml5
1 files changed, 5 insertions, 0 deletions
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index ce5602b8..bae9d003 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -73,6 +73,11 @@
<programlisting>
ldap_id_mapping = False
</programlisting>
+ In order to retrieve users and groups using POSIX attributes from trusted
+ domains, the AD administrator must make sure that the POSIX attributes
+ are replicated to the Global Catalog.
+ </para>
+ <para>
Users, groups and other entities served by SSSD are always treated as
case-insensitive in the AD provider for compatibility with Active
Directory's LDAP implementation.