Note that host SSD must be configured for hostservice option

diff --git a/contrib/slapd-modules/nssov/slapo-nssov.5 b/contrib/slapd-modules/nssov/slapo-nssov.5
index 416320d138edfe81f30cc8bb5bd713ff03c567d4..4b55db9d7b2365b56572831d4d36211416c05c90 100644 (file)
--- a/contrib/slapd-modules/nssov/slapo-nssov.5
+++ b/contrib/slapd-modules/nssov/slapo-nssov.5
@@ -155,7 +155,8 @@ The recommended approach is to use
 .B hostservice
 instead. In this case, ipHost entries must be created for all hosts
 being managed, and they must also have the authorizedServiceObject
-class to allow authorizedService attributes to be used.
+class to allow authorizedService attributes to be used. Also the
+NSS host SSD must be configured so that ipHost entries can be found.
 Authorization is checked by performing an LDAP Compare operation
 looking for the PAM service name in the authorizedService attribute.
 .B slapd