diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2015-04-09 09:25:50 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-04-10 17:29:43 +0200 |
| commit | ab11b2573a9582fa211ef68713ba50fd28dbb75f (patch) | |
| tree | 0622372d2d825a68ab4cccde8bbdea729bc6182d | |
| parent | da3fcbec493dd8d7f5af1d6c6be2a37440a1442e (diff) | |
| download | sssd-ab11b2573a9582fa211ef68713ba50fd28dbb75f.tar.gz sssd-ab11b2573a9582fa211ef68713ba50fd28dbb75f.tar.xz sssd-ab11b2573a9582fa211ef68713ba50fd28dbb75f.zip | |
MAN: Clarify how are GPO mappings called in GPO editor
https://fedorahosted.org/sssd/ticket/2618
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
| -rw-r--r-- | src/man/sssd-ad.5.xml | 22 |
1 files changed, 19 insertions, 3 deletions
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index 2d3c88c6e..55c7a4045 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -356,9 +356,9 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com) DenyInteractiveLogonRight policy settings. </para> <para> - Note: Using the Group Policy Management Editor this - value InteractiveLogonRight is called "Allow log on - locally" and "Deny log on locally". + Note: Using the Group Policy Management Editor + this value is called "Allow log on locally" + and "Deny log on locally". </para> <para> It is possible to add another PAM service name @@ -467,6 +467,12 @@ ad_gpo_map_remote_interactive = +my_pam_service, -sshd policy settings. </para> <para> + Note: Using the Group Policy Management Editor + this value is called "Access this computer + from the network" and "Deny access to this + computer from the network". + </para> + <para> It is possible to add another PAM service name to the default set by using <quote>+service_name</quote> or to explicitly remove a PAM service name from @@ -507,6 +513,11 @@ ad_gpo_map_network = +my_pam_service, -ftp policy settings. </para> <para> + Note: Using the Group Policy Management Editor + this value is called "Allow log on as a batch + job" and "Deny log on as a batch job". + </para> + <para> It is possible to add another PAM service name to the default set by using <quote>+service_name</quote> or to explicitly remove a PAM service name from @@ -542,6 +553,11 @@ ad_gpo_map_batch = +my_pam_service, -crond policy settings. </para> <para> + Note: Using the Group Policy Management Editor + this value is called "Allow log on as a service" + and "Deny log on as a service". + </para> + <para> It is possible to add a PAM service name to the default set by using <quote>+service_name</quote>. Since the default set is empty, it is not possible |