From 4343b618051d295cbb1a805a85feb117a91c6945 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Thu, 26 Sep 2013 22:08:15 +0200 Subject: MAN: Document that POSIX attributes must be replicated to GC Currently the AD provider relies on the presence of the POSIX attributes in the Global Catalog. This patch mentiones the fact in the sssd-ad(5) manual page. --- src/man/sssd-ad.5.xml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index ce5602b8..bae9d003 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -73,6 +73,11 @@ ldap_id_mapping = False + In order to retrieve users and groups using POSIX attributes from trusted + domains, the AD administrator must make sure that the POSIX attributes + are replicated to the Global Catalog. + + Users, groups and other entities served by SSSD are always treated as case-insensitive in the AD provider for compatibility with Active Directory's LDAP implementation. -- cgit