summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJakub Hrozek <jhrozek@redhat.com>2014-09-30 19:29:32 +0200
committerJakub Hrozek <jhrozek@redhat.com>2014-10-01 17:34:23 +0200
commit01a9d08ecd35809265d1b3008436130f79d0ba84 (patch)
tree08a2c0f3a70bc14a4a831e28b6788c3ecea004b1
parentf6e008fe677ffcf8781c1d5154544066ea7ca9d4 (diff)
downloadsssd-01a9d08ecd35809265d1b3008436130f79d0ba84.tar.gz
sssd-01a9d08ecd35809265d1b3008436130f79d0ba84.tar.xz
sssd-01a9d08ecd35809265d1b3008436130f79d0ba84.zip
MAN: Document the domains option of pam_sss
Reviewed-by: Pavel Reichl <preichl@redhat.com>
-rw-r--r--src/man/pam_sss.8.xml27
1 files changed, 27 insertions, 0 deletions
diff --git a/src/man/pam_sss.8.xml b/src/man/pam_sss.8.xml
index 859d42eea..7794d3acf 100644
--- a/src/man/pam_sss.8.xml
+++ b/src/man/pam_sss.8.xml
@@ -43,6 +43,9 @@
<arg choice='opt'>
<replaceable>ignore_authinfo_unavail</replaceable>
</arg>
+ <arg choice='opt'>
+ <replaceable>domains=X</replaceable>
+ </arg>
</cmdsynopsis>
</refsynopsisdiv>
@@ -130,6 +133,30 @@
the PAM framework to ignore this module.</para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>
+ <option>domains</option>
+ </term>
+ <listitem>
+ <para>
+ Allows the administrator to restrict the domains a
+ particular PAM service is allowed to authenticate
+ against. The format is a comma-separated list of
+ SSSD domain names, as specified in the sssd.conf file.
+ </para>
+ <para>
+ NOTE: Must be used in conjunction with the
+ <quote>pam_trusted_users</quote> and
+ <quote>pam_public_domains</quote> options.
+ Please see the
+ <citerefentry>
+ <refentrytitle>sssd.conf</refentrytitle>
+ <manvolnum>5</manvolnum>
+ </citerefentry> manual page for more information
+ on these two PAM responder options.
+ </para>
+ </listitem>
+ </varlistentry>
</variablelist>
</refsect1>