summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/internal.py
diff options
context:
space:
mode:
authorPetr Vobornik <pvoborni@redhat.com>2015-08-10 12:58:14 +0200
committerJan Cholasta <jcholast@redhat.com>2015-08-10 14:54:16 +0200
commitebc7ab1efedb99bd7aa80f53d1f845c3bdce8278 (patch)
treecaa216f9292f588e9e02a0f81b29f3f07744fa90 /ipalib/plugins/internal.py
parentc8882f7d1c98a795195e7bd2e48323ce95edc858 (diff)
downloadfreeipa-ebc7ab1efedb99bd7aa80f53d1f845c3bdce8278.tar.gz
freeipa-ebc7ab1efedb99bd7aa80f53d1f845c3bdce8278.tar.xz
freeipa-ebc7ab1efedb99bd7aa80f53d1f845c3bdce8278.zip
webui: add LDAP vs Kerberos behavior description to user auth types
https://fedorahosted.org/freeipa/ticket/4935 Reviewed-By: David Kupka <dkupka@redhat.com>
Diffstat (limited to 'ipalib/plugins/internal.py')
-rw-r--r--ipalib/plugins/internal.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/ipalib/plugins/internal.py b/ipalib/plugins/internal.py
index f97885cea..e1904d2d3 100644
--- a/ipalib/plugins/internal.py
+++ b/ipalib/plugins/internal.py
@@ -191,12 +191,12 @@ class i18n_messages(Command):
"show_results": _("Show Results"),
},
"authtype": {
- "config_tooltip": _("Implicit method (password) will be used if no method is chosen."),
+ "config_tooltip": _("<p>Implicit method (password) will be used if no method is chosen.</p><p><strong>Password + Two-factor:</strong> LDAP and Kerberos allow authentication with either one of the authentication types but Kerberos uses pre-authentication method which requires to use armor ccache.</p><p><strong>RADIUS with another type:</strong> Kerberos always use RADIUS, but LDAP never does. LDAP only recognize the password and two-factor authentication options.</p>"),
"type_otp": _("Two factor authentication (password + OTP)"),
"type_password": _("Password"),
"type_radius": _("Radius"),
"type_disabled": _("Disable per-user override"),
- "user_tooltip": _("Per-user setting, overwrites the global setting if any option is checked."),
+ "user_tooltip": _("<p>Per-user setting, overwrites the global setting if any option is checked.</p><p><strong>Password + Two-factor:</strong> LDAP and Kerberos allow authentication with either one of the authentication types but Kerberos uses pre-authentication method which requires to use armor ccache.</p><p><strong>RADIUS with another type:</strong> Kerberos always use RADIUS, but LDAP never does. LDAP only recognize the password and two-factor authentication options.</p>"),
},
"buttons": {
"about": _("About"),