On Mon, Dec 15, 2014 at 03:22:18AM +0100, Jakub Hrozek wrote:
> On Thu, Dec 11, 2014 at 10:37:07PM -0500, Dan Lavu wrote:
> > Downstream ticket -
https://bugzilla.redhat.com/show_bug.cgi?id=1169459
> >
> > Just a note ensuring that there is no confusion in which policy to edit. I did
not think that Remote Desktop translated to SSH =D
> >
> >
> >
> >
> > diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
> > index 4e29d4f..9542a21 100644
> > --- a/src/man/sssd-ad.5.xml
> > +++ b/src/man/sssd-ad.5.xml
> > @@ -340,6 +340,11 @@
FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
> > which GPO-based access control is evaluated based
on
> > the InteractiveLogonRight and
> > DenyInteractiveLogonRight policy settings.
> > +
> > + Note: Using the Group Policy Management Editor
this
> > + value InteractiveLogonRight is called "Allow
log on
> > + locally" and "Deny log on
locally".
> > +
> > </para>
> > <para>
> > It is possible to add another PAM service name
> > @@ -405,6 +410,11 @@
FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
> > which GPO-based access control is evaluated based
on
> > the RemoteInteractiveLogonRight and
> > DenyRemoteInteractiveLogonRight policy settings.
> > +
> > + Note: Using the Group Policy Management Editor
this
> > + value is called "Allow log on through Remote
Desktop
> > + Services" and "Deny log on through
Remote Desktop
> > + Services".
> > </para>
> > <para>
> > It is possible to add another PAM service name
>
> Thanks, I tool the liberty of re-sending the patch in git-am format. I
> hope that other sssd developers would be able to push the patch soon now
> :)
Thank you, ACK. I'll just fix the indentation and a white-space issue
which were not in the original version.
I will commit the attached patch.
Pushed to master:
01fa6711add8c52aa1a8474cf34af67d1e555c91
bye,
Sumit