diff options
| author | Garming Sam <garming@catalyst.net.nz> | 2013-12-16 16:51:04 +1300 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2014-01-14 23:44:26 +0100 |
| commit | 3a814e329bf5cf62a3d7c309b568b6dff5118960 (patch) | |
| tree | 415a826ac64045e34fef925472904e196c191a02 /docs-xml/manpages | |
| parent | 6f4ec0c0416772040903c4c236fb14384c1ded6f (diff) | |
| download | samba-3a814e329bf5cf62a3d7c309b568b6dff5118960.tar.gz samba-3a814e329bf5cf62a3d7c309b568b6dff5118960.tar.xz samba-3a814e329bf5cf62a3d7c309b568b6dff5118960.zip | |
pam_winbind: Do not honour require_membership_of in the acct module parameters
This needs a password to work, and it confuses users for it to appear to be valid here.
Pair-programmed-with: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: David Disseldorp <ddiss@samba.org>
Diffstat (limited to 'docs-xml/manpages')
| -rw-r--r-- | docs-xml/manpages/pam_winbind.8.xml | 9 | ||||
| -rw-r--r-- | docs-xml/manpages/pam_winbind.conf.5.xml | 4 |
2 files changed, 11 insertions, 2 deletions
diff --git a/docs-xml/manpages/pam_winbind.8.xml b/docs-xml/manpages/pam_winbind.8.xml index 41921309f6..08a8637031 100644 --- a/docs-xml/manpages/pam_winbind.8.xml +++ b/docs-xml/manpages/pam_winbind.8.xml @@ -87,7 +87,14 @@ <parameter>MYDOMAIN\\myuser</parameter>. pam_winbind will, in that case, lookup the SID internally. Note that NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify the list of SIDs a user is a member of with <command>wbinfo --user-sids=SID</command>. - </para></listitem> + </para> + + <para> + This option must only be specified on a auth + module declaration, as it only operates in conjunction + with password authentication. + </para> + </listitem> </varlistentry> <varlistentry> diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml b/docs-xml/manpages/pam_winbind.conf.5.xml index b318a3b58d..bef942142a 100644 --- a/docs-xml/manpages/pam_winbind.conf.5.xml +++ b/docs-xml/manpages/pam_winbind.conf.5.xml @@ -72,7 +72,9 @@ <parameter>MYDOMAIN\\myuser</parameter>. pam_winbind will, in that case, lookup the SID internally. Note that NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify the list of SIDs a user is a member of with <command>wbinfo --user-sids=SID</command>. This setting is empty by default. - </para></listitem> + </para> + <para>This option only operates during password authentication, and will not restrict access if a password is not required for any reason (such as SSH key-based login).</para> + </listitem> </varlistentry> <varlistentry> |