netcmd: auth: manpage documentation for conditional ace fields

Signed-off-by: Rob van der Linde <rob@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/docs-xml/manpages/samba-tool.8.xml b/docs-xml/manpages/samba-tool.8.xml
index 55e714dbed40f489488eef3cb43e66d503d4569a..83d91bd0af166a14d1718a4a5e52f756dfb1b570 100644 (file)
--- a/docs-xml/manpages/samba-tool.8.xml
+++ b/docs-xml/manpages/samba-tool.8.xml
@@ -728,6 +728,34 @@
                                </para>
                        </listitem>
                </varlistentry>
+               <varlistentry>
+                       <term>--user-allowed-to-authenticate-from</term>
+                       <listitem>
+                               <para>
+                                       Conditions user is allowed to authenticate from.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AU)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
+               <varlistentry>
+                       <term>--user-allowed-to-authenticate-to</term>
+                       <listitem>
+                               <para>
+                                       Conditions user is allowed to authenticate to.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AO)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
                <varlistentry>
                        <term>--service-tgt-lifetime</term>
                        <listitem>
@@ -745,6 +773,34 @@
                                </para>
                        </listitem>
                </varlistentry>
+               <varlistentry>
+                       <term>--service-allowed-to-authenticate-from</term>
+                       <listitem>
+                               <para>
+                                       Conditions service is allowed to authenticate from.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AU)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
+               <varlistentry>
+                       <term>--service-allowed-to-authenticate-to</term>
+                       <listitem>
+                               <para>
+                                       Conditions service is allowed to authenticate to.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AO)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
                <varlistentry>
                        <term>--computer-tgt-lifetime</term>
                        <listitem>
@@ -753,6 +809,20 @@
                                </para>
                        </listitem>
                </varlistentry>
+               <varlistentry>
+                       <term>-computer-allowed-to-authenticate-to</term>
+                       <listitem>
+                               <para>
+                                       Conditions computer is allowed to authenticate to.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AU)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
        </variablelist>
 </refsect3>
 
@@ -847,6 +917,34 @@
                                </para>
                        </listitem>
                </varlistentry>
+               <varlistentry>
+                       <term>--user-allowed-to-authenticate-from</term>
+                       <listitem>
+                               <para>
+                                       Conditions user is allowed to authenticate from.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AU)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
+               <varlistentry>
+                       <term>--user-allowed-to-authenticate-to</term>
+                       <listitem>
+                               <para>
+                                       Conditions user is allowed to authenticate to.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AO)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
                <varlistentry>
                        <term>--service-tgt-lifetime</term>
                        <listitem>
@@ -864,6 +962,34 @@
                                </para>
                        </listitem>
                </varlistentry>
+               <varlistentry>
+                       <term>--service-allowed-to-authenticate-from</term>
+                       <listitem>
+                               <para>
+                                       Conditions service is allowed to authenticate from.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AU)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
+               <varlistentry>
+                       <term>--service-allowed-to-authenticate-to</term>
+                       <listitem>
+                               <para>
+                                       Conditions service is allowed to authenticate to.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AO)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
                <varlistentry>
                        <term>--computer-tgt-lifetime</term>
                        <listitem>
@@ -872,6 +998,20 @@
                                </para>
                        </listitem>
                </varlistentry>
+               <varlistentry>
+                       <term>-computer-allowed-to-authenticate-to</term>
+                       <listitem>
+                               <para>
+                                       Conditions computer is allowed to authenticate to.
+                               </para>
+                               <para>
+                                       Must be a valid SDDL string.
+                               </para>
+                               <para>
+                                       Example: O:SYG:SYD:(XA;OICI;CR;;;WD;(Member_of {SID(AU)}))
+                               </para>
+                       </listitem>
+               </varlistentry>
        </variablelist>
 </refsect3>