[PATCH 2/2] doc: require_membership_of supports multiple groups
David Disseldorp
ddiss at samba.org
Tue Apr 30 17:07:20 MDT 2013
Signed-off-by: David Disseldorp <ddiss at samba.org>
---
docs-xml/manpages/pam_winbind.8.xml | 9 +++++----
docs-xml/manpages/pam_winbind.conf.5.xml | 9 +++++----
2 files changed, 10 insertions(+), 8 deletions(-)
diff --git a/docs-xml/manpages/pam_winbind.8.xml b/docs-xml/manpages/pam_winbind.8.xml
index 39b75fb..d9d6971 100644
--- a/docs-xml/manpages/pam_winbind.8.xml
+++ b/docs-xml/manpages/pam_winbind.8.xml
@@ -79,14 +79,15 @@
</varlistentry>
<varlistentry>
- <term>require_membership_of=[SID or NAME]</term>
+ <term>require_membership_of=[SID or NAME]...</term>
<listitem><para>
- If this option is set, pam_winbind will only succeed if the user is a member of the given SID or NAME. A SID
+ If this option is set, pam_winbind will only succeed if the user is a member of a given SID or NAME. A SID
can be either a group-SID, an alias-SID or even an user-SID. It is also possible to give a NAME instead of the
SID. That name must have the form: <parameter>MYDOMAIN\\mygroup</parameter> or
<parameter>MYDOMAIN\\myuser</parameter>. pam_winbind will, in that case, lookup the SID internally. Note that
- NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify the list of SIDs a
- user is a member of with <command>wbinfo --user-sids=SID</command>.
+ NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify which SIDs a
+ user is a member of with <command>wbinfo --user-sids=SID</command>. Multiple SIDs or NAMEs may be
+ specified using a comma-separated list.
</para></listitem>
</varlistentry>
diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml b/docs-xml/manpages/pam_winbind.conf.5.xml
index 7098ff4..e01cafe 100644
--- a/docs-xml/manpages/pam_winbind.conf.5.xml
+++ b/docs-xml/manpages/pam_winbind.conf.5.xml
@@ -64,14 +64,15 @@
</varlistentry>
<varlistentry>
- <term>require_membership_of = [SID or NAME]</term>
+ <term>require_membership_of = [SID or NAME]...</term>
<listitem><para>
- If this option is set, pam_winbind will only succeed if the user is a member of the given SID or NAME. A SID
+ If this option is set, pam_winbind will only succeed if the user is a member of a given SID or NAME. A SID
can be either a group-SID, an alias-SID or even an user-SID. It is also possible to give a NAME instead of the
SID. That name must have the form: <parameter>MYDOMAIN\\mygroup</parameter> or
<parameter>MYDOMAIN\\myuser</parameter>. pam_winbind will, in that case, lookup the SID internally. Note that
- NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify the list of SIDs a
- user is a member of with <command>wbinfo --user-sids=SID</command>. This setting is empty by default.
+ NAME may not contain any spaces. It is thus recommended to only use SIDs. You can verify which SIDs a
+ user is a member of with <command>wbinfo --user-sids=SID</command>. Multiple SIDs or NAMEs may be
+ specified using a comma-separated list. This setting is empty by default.
</para></listitem>
</varlistentry>
--
1.8.1.4
More information about the samba-technical
mailing list