From 01fa6711add8c52aa1a8474cf34af67d1e555c91 Mon Sep 17 00:00:00 2001
From: Dan Lavu <side_control@runlevelone.net>
Date: Mon, 15 Dec 2014 03:20:40 +0100
Subject: [PATCH 1/2] MAN: Clarify ad_gpo_map* options
Resolves:
https://fedorahosted.org/sssd/ticket/2515
---
src/man/sssd-ad.5.xml | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 4e29d4f75cae5bf17e4bb85fa46c921b25ee8047..b721fb73b20837c9dc3abac25d3300649115c607 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -342,6 +342,11 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
DenyInteractiveLogonRight policy settings.
</para>
<para>
+ Note: Using the Group Policy Management Editor this
+ value InteractiveLogonRight is called "Allow log on
+ locally" and "Deny log on locally".
+ </para>
+ <para>
It is possible to add another PAM service name
to the default set by using <quote>+service_name</quote>
or to explicitly remove a PAM service name from
@@ -407,6 +412,12 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
DenyRemoteInteractiveLogonRight policy settings.
</para>
<para>
+ Note: Using the Group Policy Management Editor this
+ value is called "Allow log on through Remote Desktop
+ Services" and "Deny log on through Remote Desktop
+ Services".
+ </para>
+ <para>
It is possible to add another PAM service name
to the default set by using <quote>+service_name</quote>
or to explicitly remove a PAM service name from
--
1.9.3