On Mon, Dec 15, 2014 at 03:22:18AM +0100, Jakub Hrozek wrote:
On Thu, Dec 11, 2014 at 10:37:07PM -0500, Dan Lavu wrote:
> Downstream ticket -
https://bugzilla.redhat.com/show_bug.cgi?id=1169459
>
> Just a note ensuring that there is no confusion in which policy to edit. I did not
think that Remote Desktop translated to SSH =D
>
>
>
>
> diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
> index 4e29d4f..9542a21 100644
> --- a/src/man/sssd-ad.5.xml
> +++ b/src/man/sssd-ad.5.xml
> @@ -340,6 +340,11 @@
FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
> which GPO-based access control is evaluated based on
> the InteractiveLogonRight and
> DenyInteractiveLogonRight policy settings.
> +
> + Note: Using the Group Policy Management Editor this
> + value InteractiveLogonRight is called "Allow log
on
> + locally" and "Deny log on locally".
> +
> </para>
> <para>
> It is possible to add another PAM service name
> @@ -405,6 +410,11 @@
FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
> which GPO-based access control is evaluated based on
> the RemoteInteractiveLogonRight and
> DenyRemoteInteractiveLogonRight policy settings.
> +
> + Note: Using the Group Policy Management Editor this
> + value is called "Allow log on through Remote
Desktop
> + Services" and "Deny log on through Remote
Desktop
> + Services".
> </para>
> <para>
> It is possible to add another PAM service name
Thanks, I tool the liberty of re-sending the patch in git-am format. I
hope that other sssd developers would be able to push the patch soon now
:)
Thank you, ACK. I'll just fix the indentation and a white-space issue
which were not in the original version.
I will commit the attached patch.
bye,
Sumit