1
0
mirror of https://github.com/samba-team/samba.git synced 2025-08-03 04:22:09 +03:00

netcmd: auth policy: document allowed to authenticate from silo and to by silo attributes

Signed-off-by: Rob van der Linde <rob@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Rob van der Linde
2023-11-16 13:39:23 +13:00
committed by Douglas Bagnall
parent 42de24d73a
commit 1e00952c34

View File

@ -742,6 +742,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--user-allowed-to-authenticate-from-silo</term>
<listitem>
<para>
User is allowed to authenticate from a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --user-allowed-to-authenticate-from
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--user-allowed-to-authenticate-to</term>
<listitem>
@ -756,6 +768,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--user-allowed-to-authenticate-to-by-silo</term>
<listitem>
<para>
User is allowed to authenticate to by a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --user-allowed-to-authenticate-to
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-tgt-lifetime-mins</term>
<listitem>
@ -787,6 +811,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-allowed-to-authenticate-from-silo</term>
<listitem>
<para>
Service is allowed to authenticate from a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --service-allowed-to-authenticate-from
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-allowed-to-authenticate-to</term>
<listitem>
@ -801,6 +837,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--service-allowed-to-authenticate-to-by-silo</term>
<listitem>
<para>
Service is allowed to authenticate to by a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --service-allowed-to-authenticate-to
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--computer-tgt-lifetime-mins</term>
<listitem>
@ -823,6 +871,18 @@
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>--computer-allowed-to-authenticate-to-by-silo</term>
<listitem>
<para>
Computer is allowed to authenticate to by a given silo.
</para>
<para>
This attribute avoids the need to write SDDL by hand and
cannot be used with --computer-allowed-to-authenticate-to
</para>
</listitem>
</varlistentry>
</variablelist>
</refsect3>