From 00c99cceb43d97a5331e0407337e845c710a51d4 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Wed, 7 Apr 2021 13:52:27 -0400
Subject: [PATCH] Add LDAP cache options to the default.conf man page

https://pagure.io/freeipa/issue/8798

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Rafael Guterres Jeffman <rjeffman@redhat.com>
---
 client/man/default.conf.5 | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/client/man/default.conf.5 b/client/man/default.conf.5
index f85fd6704..1fdceb122 100644
--- a/client/man/default.conf.5
+++ b/client/man/default.conf.5
@@ -113,6 +113,12 @@ Specifies whether values should be prompted for or not. The default is True.
 .B kinit_lifetime <time duration spec>
 Controls the lifetime of ticket obtained by users authenticating to the WebGUI using login/password. The expected format is a time duration string. Examples are "2 hours", "1h:30m", "10 minutes", "5min, 30sec". When the parameter is not set in default.conf, the ticket will have a duration inherited from the default value for kerberos clients, that can be set as ticket_lifetime in krb5.conf. When the ticket lifetime has expired, the ticket is not valid anymore and the GUI will prompt to re-login with a message "Your session has expired. Please re-login."
 .TP
+.B ldap_cache <boolean>
+Enable a per-request LDAP cache. The default is True.
+.TP
+.B ldap_cache_size <integer>
+The maximum number of entries cached if ldap_cache is True. Since this cache is per-request it is not expected to be very large. The default is 100. Setting the value < 1 effectively disables the cache regardless of the ldap_cache setting
+.TP
 .B ldap_uri <URI>
 Specifies the URI of the IPA LDAP server to connect to. The URI scheme may be one of \fBldap\fR or \fBldapi\fR. The default is to use ldapi, e.g. ldapi://%2fvar%2frun%2fslapd\-EXAMPLE\-COM.socket
 .TP