From 3f70f0c29b85f2c3f660f5cb99f2854cc8c62c21 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Wed, 28 Apr 2010 10:01:06 +0200
Subject: Add retry option to pam_sss

---
 src/man/pam_sss.8.xml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

(limited to 'src/man')

diff --git a/src/man/pam_sss.8.xml b/src/man/pam_sss.8.xml
index 9a681960a..aed76e2f0 100644
--- a/src/man/pam_sss.8.xml
+++ b/src/man/pam_sss.8.xml
@@ -31,6 +31,9 @@
             <arg choice='opt'>
                 <replaceable>use_authtok</replaceable>
             </arg>
+            <arg choice='opt'>
+                <replaceable>retry=N</replaceable>
+            </arg>
         </cmdsynopsis>
     </refsynopsisdiv>
 
@@ -75,6 +78,20 @@
                     password module.</para>
                 </listitem>
             </varlistentry>
+            <varlistentry>
+                <term>
+                    <option>retry=N</option>
+                </term>
+                <listitem>
+                    <para>If specified the user is asked another N times for a
+                    password if authentication fails. Default is 0.</para>
+                    <para>Please note that this option might not work as
+                    expected if the application calling PAM handles the user
+                    dialog on its own. A typical example is
+                    <command>sshd</command> with
+                    <option>PasswordAuthentication</option>.</para>
+                </listitem>
+            </varlistentry>
         </variablelist>
     </refsect1>
 
-- 
cgit