From 901ccc1393a7e494f7b1b64eaeb2f7809056aafa Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 2 Jun 2010 14:08:50 -0400 Subject: First pass at per-command documentation --- ipalib/plugins/krbtpolicy.py | 19 +++++++++++++++++-- 1 file changed, 17 insertions(+), 2 deletions(-) (limited to 'ipalib/plugins/krbtpolicy.py') diff --git a/ipalib/plugins/krbtpolicy.py b/ipalib/plugins/krbtpolicy.py index 3f9eeee6..2c797fd1 100644 --- a/ipalib/plugins/krbtpolicy.py +++ b/ipalib/plugins/krbtpolicy.py @@ -18,6 +18,21 @@ # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA """ Kerberos ticket policy + +There is a single kerberos ticket policy. This policy defines the +maximum ticket lifetime (maximum life of a ticket) and maximum renewal +age, the period during which the ticket is renewable. + +EXAMPLES: + + Display the current policy: + ipa krbtpolicy-show + + Reset the policy to the default: + ipa krbtpolicy-reset + + Modify the policy to 8 hours max life, 1-day max renewal: + ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400 """ from ipalib import api @@ -51,12 +66,12 @@ class krbtpolicy(LDAPObject): Int('krbmaxticketlife?', cli_name='maxlife', label=_('Max life'), - doc=_('Maximum ticket life'), + doc=_('Maximum ticket life (seconds)'), ), Int('krbmaxrenewableage?', cli_name='maxrenew', label=_('Max renew'), - doc=_('Maximum renewable age'), + doc=_('Maximum renewable age (seconds)'), ), ) -- cgit