>From ced7d45176a9f2a760dce7545d630efd1c30fb2c Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 30 Sep 2014 19:29:32 +0200 Subject: [PATCH] MAN: Document the domains option of pam_sss --- src/man/pam_sss.8.xml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/src/man/pam_sss.8.xml b/src/man/pam_sss.8.xml index 859d42eeae0fab9a3097010252ae1b4e04d306da..7794d3acfdfdbde491a3e1ada44481b73588e41f 100644 --- a/src/man/pam_sss.8.xml +++ b/src/man/pam_sss.8.xml @@ -43,6 +43,9 @@ ignore_authinfo_unavail + + domains=X + @@ -130,6 +133,30 @@ the PAM framework to ignore this module. + + + + + + + Allows the administrator to restrict the domains a + particular PAM service is allowed to authenticate + against. The format is a comma-separated list of + SSSD domain names, as specified in the sssd.conf file. + + + NOTE: Must be used in conjunction with the + pam_trusted_users and + pam_public_domains options. + Please see the + + sssd.conf + 5 + manual page for more information + on these two PAM responder options. + + + -- 1.9.3