[PATCH 2/2] doc: require_membership_of supports multiple groups

David Disseldorp ddiss at samba.org
Tue Apr 30 17:07:20 MDT 2013


Signed-off-by: David Disseldorp <ddiss at samba.org>
---
 docs-xml/manpages/pam_winbind.8.xml      | 9 +++++----
 docs-xml/manpages/pam_winbind.conf.5.xml | 9 +++++----
 2 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/docs-xml/manpages/pam_winbind.8.xml b/docs-xml/manpages/pam_winbind.8.xml
index 39b75fb..d9d6971 100644
--- a/docs-xml/manpages/pam_winbind.8.xml
+++ b/docs-xml/manpages/pam_winbind.8.xml
@@ -79,14 +79,15 @@
 		</varlistentry>
 
 		<varlistentry>
-		<term>require_membership_of=[SID or NAME]</term>
+		<term>require_membership_of=[SID or NAME]...</term>
 		<listitem><para>
-		If this option is set, pam_winbind will only succeed if the user is a member of the given SID or NAME. A SID
+		If this option is set, pam_winbind will only succeed if the user is a member of a given SID or NAME. A SID
 		can be either a group-SID, an alias-SID or even an user-SID. It is also possible to give a NAME instead of the
 		SID. That name must have the form: <parameter>MYDOMAIN\\mygroup</parameter> or
 		<parameter>MYDOMAIN\\myuser</parameter>.  pam_winbind will, in that case, lookup the SID internally. Note that
-		NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify the list of SIDs a
-		user is a member of with <command>wbinfo --user-sids=SID</command>.
+		NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify which SIDs a
+		user is a member of with <command>wbinfo --user-sids=SID</command>.  Multiple SIDs or NAMEs may be
+		specified using a comma-separated list.
 		</para></listitem>
 		</varlistentry>
 
diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml b/docs-xml/manpages/pam_winbind.conf.5.xml
index 7098ff4..e01cafe 100644
--- a/docs-xml/manpages/pam_winbind.conf.5.xml
+++ b/docs-xml/manpages/pam_winbind.conf.5.xml
@@ -64,14 +64,15 @@
 		</varlistentry>
 
 		<varlistentry>
-		<term>require_membership_of = [SID or NAME]</term>
+		<term>require_membership_of = [SID or NAME]...</term>
 		<listitem><para>
-		If this option is set, pam_winbind will only succeed if the user is a member of the given SID or NAME. A SID
+		If this option is set, pam_winbind will only succeed if the user is a member of a given SID or NAME. A SID
 		can be either a group-SID, an alias-SID or even an user-SID. It is also possible to give a NAME instead of the
 		SID. That name must have the form: <parameter>MYDOMAIN\\mygroup</parameter> or
 		<parameter>MYDOMAIN\\myuser</parameter>.  pam_winbind will, in that case, lookup the SID internally. Note that
-		NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify the list of SIDs a
-		user is a member of with <command>wbinfo --user-sids=SID</command>. This setting is empty by default.
+		NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify which SIDs a
+		user is a member of with <command>wbinfo --user-sids=SID</command>. Multiple SIDs or NAMEs may be
+		specified using a comma-separated list. This setting is empty by default.
 		</para></listitem>
 		</varlistentry>
 
-- 
1.8.1.4



More information about the samba-technical mailing list