diff options
| author | Sumit Bose <sbose@redhat.com> | 2010-10-29 14:46:21 +0200 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2010-11-04 15:04:21 -0400 |
| commit | e7a4ea98c6751a8c3d8405ca31481006f29b901e (patch) | |
| tree | f29eecd30ba4c69e37f665b8347e5e71ef9aac33 /src/man | |
| parent | b87233035e26cee919dcf46adaec29ba7fdaa51e (diff) | |
| download | sssd-e7a4ea98c6751a8c3d8405ca31481006f29b901e.tar.gz sssd-e7a4ea98c6751a8c3d8405ca31481006f29b901e.tar.xz sssd-e7a4ea98c6751a8c3d8405ca31481006f29b901e.zip | |
Call krb5_child to check access permissions
Diffstat (limited to 'src/man')
| -rw-r--r-- | src/man/sssd-krb5.5.xml | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml index e9c2cac3c..0238af1b8 100644 --- a/src/man/sssd-krb5.5.xml +++ b/src/man/sssd-krb5.5.xml @@ -44,6 +44,14 @@ configure this. </para> <para> + This backend also provides access control based on the .k5login + file in the home directory of the user. See <citerefentry> + <refentrytitle>.k5login</refentrytitle><manvolnum>5</manvolnum> + </citerefentry> for more details. Please note that an empty .k5login + file will deny all access to this user. To activate this feature + use 'access_provider = krb5' in your sssd configuration. + </para> + <para> In the case where the UPN is not available in the identity backend <command>sssd</command> will construct a UPN using the format <replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>. |