From 01a9d08ecd35809265d1b3008436130f79d0ba84 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Tue, 30 Sep 2014 19:29:32 +0200
Subject: MAN: Document the domains option of pam_sss

Reviewed-by: Pavel Reichl <preichl@redhat.com>
---
 src/man/pam_sss.8.xml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

(limited to 'src')

diff --git a/src/man/pam_sss.8.xml b/src/man/pam_sss.8.xml
index 859d42eea..7794d3acf 100644
--- a/src/man/pam_sss.8.xml
+++ b/src/man/pam_sss.8.xml
@@ -43,6 +43,9 @@
             <arg choice='opt'>
                 <replaceable>ignore_authinfo_unavail</replaceable>
             </arg>
+            <arg choice='opt'>
+                <replaceable>domains=X</replaceable>
+            </arg>
         </cmdsynopsis>
     </refsynopsisdiv>
 
@@ -130,6 +133,30 @@
                     the PAM framework to ignore this module.</para>
                 </listitem>
             </varlistentry>
+            <varlistentry>
+                <term>
+                    <option>domains</option>
+                </term>
+                <listitem>
+                    <para>
+                        Allows the administrator to restrict the domains a
+                        particular PAM service is allowed to authenticate
+                        against. The format is a comma-separated list of
+                        SSSD domain names, as specified in the sssd.conf file.
+                    </para>
+                    <para>
+                        NOTE: Must be used in conjunction with the
+                        <quote>pam_trusted_users</quote> and
+                        <quote>pam_public_domains</quote> options.
+                        Please see the
+                        <citerefentry>
+                            <refentrytitle>sssd.conf</refentrytitle>
+                            <manvolnum>5</manvolnum>
+                        </citerefentry> manual page for more information
+                        on these two PAM responder options.
+                    </para>
+                </listitem>
+            </varlistentry>
         </variablelist>
     </refsect1>
 
-- 
cgit