From f90a36c390348cbfee5b025cbd6ca205c49299f7 Mon Sep 17 00:00:00 2001
From: Ilia Andreev <ilia.andreev.de@gmail.com>
Date: Mon, 30 Mar 2026 09:20:18 +0200
Subject: [PATCH] docs: mention LDAP recursionGroupAttr in config.yaml.dist
 (#4697)

The recursionGroupAttr option for nested LDAP group resolution is
documented on dexidp.io but absent from config.yaml.dist, making it
hard to discover. Add a brief note pointing to the LDAP connector docs.

Ref: https://github.com/dexidp/dex/issues/2955

Signed-off-by: Ilia Andreev <ilia.andreev@palark.com>
Co-authored-by: Ilia Andreev <ilia.andreev@palark.com>
---
 config.yaml.dist | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config.yaml.dist b/config.yaml.dist
index 669066c9..807448de 100644
--- a/config.yaml.dist
+++ b/config.yaml.dist
@@ -163,6 +163,9 @@ web:
 # Connectors are used to authenticate users against upstream identity providers.
 #
 # See the documentation (https://dexidp.io/docs/connectors/) for further information.
+#
+# For LDAP nested group resolution, set groupSearch.userMatchers[].recursionGroupAttr
+# in the connector config. See: https://dexidp.io/docs/connectors/ldap/
 # connectors: []
 
 # Enable the password database.