man: document how to disable sudo smart and full refresh

Resolves: SSSD#5601
pbrezina · May 7, 2021 · 7c44a3b · 7c44a3b
1 parent c79ee66
commit 7c44a3b
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml
@@ -1531,6 +1531,11 @@ ldap_access_filter = (employeeType=admin)
                             <emphasis>ldap_sudo_smart_refresh_interval
                             </emphasis>
                         </para>
+                        <para>
+                            You can disable full refresh by setting this option
+                            to 0. However, either smart or full refresh must
+                            be enabled.
+                        </para>
                         <para>
                             Default: 21600 (6 hours)
                         </para>
@@ -1561,6 +1566,11 @@ ldap_access_filter = (employeeType=admin)
                             (by default every 15 minutes, see
                             <emphasis>ldap_connection_expire_timeout</emphasis>).
                         </para>
+                        <para>
+                            You can disable smart refresh by setting this option
+                            to 0. However, either smart or full refresh must
+                            be enabled.
+                        </para>
                         <para>
                             Default: 900 (15 minutes)
                         </para>