Skip to content

Commit

Permalink
netcmd: auth policy: document allowed to authenticate from silo and t…
Browse files Browse the repository at this point in the history 
…o by silo attributes

Signed-off-by: Rob van der Linde <[email protected]>
Reviewed-by: Douglas Bagnall <[email protected]>
Reviewed-by: Andrew Bartlett <[email protected]>
  • Loading branch information
@robvdl @douglasbagnall
robvdl authored and douglasbagnall committed Nov 22, 2023
1 parent 42de24d commit 1e00952
Showing 1 changed file with 60 additions and 0 deletions.
60 changes: 60 additions & 0 deletions docs-xml/manpages/samba-tool.8.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -742,6 +742,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--user-allowed-to-authenticate-from-silo</term>
<listitem>
<para>
User is allowed to authenticate from a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --user-allowed-to-authenticate-from
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--user-allowed-to-authenticate-to</term>
<listitem>
Expand All @@ -756,6 +768,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--user-allowed-to-authenticate-to-by-silo</term>
<listitem>
<para>
User is allowed to authenticate to by a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --user-allowed-to-authenticate-to
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-tgt-lifetime-mins</term>
<listitem>
Expand Down Expand Up @@ -787,6 +811,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-allowed-to-authenticate-from-silo</term>
<listitem>
<para>
Service is allowed to authenticate from a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --service-allowed-to-authenticate-from
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-allowed-to-authenticate-to</term>
<listitem>
Expand All @@ -801,6 +837,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-allowed-to-authenticate-to-by-silo</term>
<listitem>
<para>
Service is allowed to authenticate to by a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --service-allowed-to-authenticate-to
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--computer-tgt-lifetime-mins</term>
<listitem>
Expand All @@ -823,6 +871,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--computer-allowed-to-authenticate-to-by-silo</term>
<listitem>
<para>
Computer is allowed to authenticate to by a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --computer-allowed-to-authenticate-to
</para>
</listitem>
</varlistentry>
</variablelist>
</refsect3>

Expand Down

0 comments on commit 1e00952

Please sign in to comment.