summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--src/man/sssd-ad.5.xml22
1 files changed, 19 insertions, 3 deletions
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 2d3c88c6e..55c7a4045 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -356,9 +356,9 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
DenyInteractiveLogonRight policy settings.
</para>
<para>
- Note: Using the Group Policy Management Editor this
- value InteractiveLogonRight is called "Allow log on
- locally" and "Deny log on locally".
+ Note: Using the Group Policy Management Editor
+ this value is called "Allow log on locally"
+ and "Deny log on locally".
</para>
<para>
It is possible to add another PAM service name
@@ -467,6 +467,12 @@ ad_gpo_map_remote_interactive = +my_pam_service, -sshd
policy settings.
</para>
<para>
+ Note: Using the Group Policy Management Editor
+ this value is called "Access this computer
+ from the network" and "Deny access to this
+ computer from the network".
+ </para>
+ <para>
It is possible to add another PAM service name
to the default set by using <quote>+service_name</quote>
or to explicitly remove a PAM service name from
@@ -507,6 +513,11 @@ ad_gpo_map_network = +my_pam_service, -ftp
policy settings.
</para>
<para>
+ Note: Using the Group Policy Management Editor
+ this value is called "Allow log on as a batch
+ job" and "Deny log on as a batch job".
+ </para>
+ <para>
It is possible to add another PAM service name
to the default set by using <quote>+service_name</quote>
or to explicitly remove a PAM service name from
@@ -542,6 +553,11 @@ ad_gpo_map_batch = +my_pam_service, -crond
policy settings.
</para>
<para>
+ Note: Using the Group Policy Management Editor
+ this value is called "Allow log on as a service"
+ and "Deny log on as a service".
+ </para>
+ <para>
It is possible to add a PAM service name to the
default set by using <quote>+service_name</quote>.
Since the default set is empty, it is not possible