man: add details for ad_access_filter

Mentioned explicitly that GPO based access control must be disabled if ad_access_filter based access control should be the only access control. Reviewed-by: Dan Lavu <[email protected]> (cherry picked from commit 71160e3)
SSSD · Jul 23, 2024 · 70ea950 · 70ea950
1 parent 5ff80cf
commit 70ea950
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
@@ -263,7 +263,12 @@ ad_enabled_domains = sales.example.com, eng.example.com
                             to be allowed access. Please note that the
                             <quote>access_provider</quote> option must be
                             explicitly set to <quote>ad</quote> in order
-                            for this option to have an effect.
+                            for this option to have an effect. Additionally,
+                            please note that the default access control is the
+                            GPO based access control which must be disabled
+                            explicitly if <quote>ad_access_filter</quote> should
+                            be the only access control scheme (see option
+                            <quote>ad_gpo_access_control</quote> for details).
                         </para>
                         <para>
                             The option also supports specifying different