From 01fa6711add8c52aa1a8474cf34af67d1e555c91 Mon Sep 17 00:00:00 2001 From: Dan Lavu Date: Mon, 15 Dec 2014 03:20:40 +0100 Subject: [PATCH 1/2] MAN: Clarify ad_gpo_map* options Resolves: https://fedorahosted.org/sssd/ticket/2515 --- src/man/sssd-ad.5.xml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml index 4e29d4f75cae5bf17e4bb85fa46c921b25ee8047..b721fb73b20837c9dc3abac25d3300649115c607 100644 --- a/src/man/sssd-ad.5.xml +++ b/src/man/sssd-ad.5.xml @@ -342,6 +342,11 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com) DenyInteractiveLogonRight policy settings. + Note: Using the Group Policy Management Editor this + value InteractiveLogonRight is called "Allow log on + locally" and "Deny log on locally". + + It is possible to add another PAM service name to the default set by using +service_name or to explicitly remove a PAM service name from @@ -407,6 +412,12 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com) DenyRemoteInteractiveLogonRight policy settings. + Note: Using the Group Policy Management Editor this + value is called "Allow log on through Remote Desktop + Services" and "Deny log on through Remote Desktop + Services". + + It is possible to add another PAM service name to the default set by using +service_name or to explicitly remove a PAM service name from -- 1.9.3