From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Mon, 21 Feb 2022 01:58:47 +0000 (+1300)
Subject: samba-tool delegation: Clarify msDS-AllowedToDelegateTo delegation command documentation
X-Git-Tag: tevent-0.12.0~230
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=52f9629408e7674f28a90d030c475178d644e192;p=thirdparty%2Fsamba.git

samba-tool delegation: Clarify msDS-AllowedToDelegateTo delegation command documentation

This makes the difference between msDS-AllowedToDelegateTo and
msDS-AllowedToActOnBehalfOfOtherIdentity more clear.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14954

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/python/samba/netcmd/delegation.py b/python/samba/netcmd/delegation.py
index a8c36b8e96a..15947cc67a3 100644
--- a/python/samba/netcmd/delegation.py
+++ b/python/samba/netcmd/delegation.py
@@ -293,7 +293,7 @@ class cmd_delegation_for_any_protocol(Command):
 
 
 class cmd_delegation_add_service(Command):
-    """Add a service principal as msDS-AllowedToDelegateTo."""
+    """Add a service principal to msDS-AllowedToDelegateTo so that an account may delegate to it."""
 
     synopsis = "%prog <accountname> <principal> [options]"
 
@@ -347,7 +347,7 @@ class cmd_delegation_add_service(Command):
 
 
 class cmd_delegation_del_service(Command):
-    """Delete a service principal as msDS-AllowedToDelegateTo."""
+    """Delete a service principal from msDS-AllowedToDelegateTo so that an account may no longer delegate to it."""
 
     synopsis = "%prog <accountname> <principal> [options]"