>From 3d76f7fe55bdb8357ace08920296c7e1f648fba2 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 30 Sep 2014 19:29:32 +0200 Subject: [PATCH] MAN: Document the domains option of pam_sss --- src/man/pam_sss.8.xml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/src/man/pam_sss.8.xml b/src/man/pam_sss.8.xml index 859d42eeae0fab9a3097010252ae1b4e04d306da..fcc83b21ed823febddfb98de5af9e471b5eeeead 100644 --- a/src/man/pam_sss.8.xml +++ b/src/man/pam_sss.8.xml @@ -43,6 +43,9 @@ ignore_authinfo_unavail + + domains=X + @@ -130,6 +133,30 @@ the PAM framework to ignore this module. + + + + + + + Allows the administrator to restrict the domains a + particular PAM service is allowed to authenticate + against. The format is a comma-separated list of + SSSD domain names, as specified in the sssd.conf file. + + + NOTE: Must be used in conjuction with the + pam_trusted_users and + pam_public_domains options. + Please see the + + sssd.conf + 5 + manual page for more information + on these two PAM responder options. + + + -- 1.9.3