From ab11b2573a9582fa211ef68713ba50fd28dbb75f Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Thu, 9 Apr 2015 09:25:50 +0200
Subject: MAN: Clarify how are GPO mappings called in GPO editor
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

https://fedorahosted.org/sssd/ticket/2618

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
---
 src/man/sssd-ad.5.xml | 22 +++++++++++++++++++---
 1 file changed, 19 insertions(+), 3 deletions(-)

(limited to 'src')

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 2d3c88c6..55c7a404 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -356,9 +356,9 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
                             DenyInteractiveLogonRight policy settings.
                         </para>
                         <para>
-                            Note: Using the Group Policy Management Editor this
-                            value InteractiveLogonRight  is called "Allow log on
-                            locally" and "Deny log on locally".
+                            Note: Using the Group Policy Management Editor
+                            this value is called "Allow log on locally"
+                            and "Deny log on locally".
                         </para>
                         <para>
                             It is possible to add another PAM service name
@@ -466,6 +466,12 @@ ad_gpo_map_remote_interactive = +my_pam_service, -sshd
                             the NetworkLogonRight and DenyNetworkLogonRight
                             policy settings.
                         </para>
+                        <para>
+                            Note: Using the Group Policy Management Editor
+                            this value is called "Access this computer
+                            from the network" and "Deny access to this
+                            computer from the network".
+                        </para>
                         <para>
                             It is possible to add another PAM service name
                             to the default set by using <quote>+service_name</quote>
@@ -506,6 +512,11 @@ ad_gpo_map_network = +my_pam_service, -ftp
                             the BatchLogonRight and DenyBatchLogonRight
                             policy settings.
                         </para>
+                        <para>
+                            Note: Using the Group Policy Management Editor
+                            this value is called "Allow log on as a batch
+                            job" and "Deny log on as a batch job".
+                        </para>
                         <para>
                             It is possible to add another PAM service name
                             to the default set by using <quote>+service_name</quote>
@@ -541,6 +552,11 @@ ad_gpo_map_batch = +my_pam_service, -crond
                             the ServiceLogonRight and DenyServiceLogonRight
                             policy settings.
                         </para>
+                        <para>
+                            Note: Using the Group Policy Management Editor
+                            this value is called "Allow log on as a service"
+                            and "Deny log on as a service".
+                        </para>
                         <para>
                             It is possible to add a PAM service name to the
                             default set by using <quote>+service_name</quote>.
-- 
cgit