docs: mention AD prerequirements for using idmap_ad

Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/docs-xml/manpages/idmap_ad.8.xml b/docs-xml/manpages/idmap_ad.8.xml
index 2ae7fc8c518ce1d58305f60d2df65ace6ed1b441..0e33b772bb225b939c751cc7fc62cf30813648be 100644 (file)
--- a/docs-xml/manpages/idmap_ad.8.xml
+++ b/docs-xml/manpages/idmap_ad.8.xml
@@ -22,9 +22,12 @@
        id mappings from an AD server that uses RFC2307/SFU schema
        extensions. This module implements only the "idmap"
        API, and is READONLY. Mappings must be provided in advance
-       by the administrator by adding the posixAccount/posixGroup
-       classes and relative attribute/value pairs to the user and
-       group objects in the AD.</para>
+       by the administrator by adding the uidNumber attributes for
+       users and gidNumber attributes for groups in the AD. Winbind
+       will only map users that have a uidNumber and whose primary
+       group have a gidNumber attribute set. It is however
+       recommended that all groups in use have gidNumber attributes
+       assigned, otherwise they are not working.</para>
 
        <para>
        Currently, the <parameter>ad</parameter> backend