diff options
| -rw-r--r-- | src/man/sssd-ad.5.xml | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index 1570ed8a..a628e0d6 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -248,6 +248,20 @@ ad_domain = example.com </para> </refsect1> + <refsect1 id='notes'> + <title>NOTES</title> + <para> + The AD access control provider checks if the account is expired. + It has the same effect as the following configuration of the LDAP + provider: +<programlisting> +access_provider = ldap +ldap_access_order = expire +ldap_account_expire_policy = ad +</programlisting> + </para> + </refsect1> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" /> </refentry> |