diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index 247d023892f..79724fff5da 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -258,17 +258,13 @@ ad_enabled_domains = sales.example.com, eng.example.com ad_access_filter (string) - This option specifies LDAP access control - filter that the user must match in order - to be allowed access. Please note that the - access_provider option must be - explicitly set to ad in order - for this option to have an effect. Additionally, - please note that the default access control is the - GPO based access control which must be disabled - explicitly if ad_access_filter should - be the only access control scheme (see option - ad_gpo_access_control for details). + Specifies an LDAP access control filter that a user + must match to gain access. The access_provider + option must be explicitly set to ad + for this option to take effect. If you want to use the + ad_access_filter as the only access control + scheme, you must disable GPO based access control + (see option ad_gpo_access_control for details). The option also supports specifying different