From e7a4ea98c6751a8c3d8405ca31481006f29b901e Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Fri, 29 Oct 2010 14:46:21 +0200
Subject: Call krb5_child to check access permissions

---
 src/man/sssd-krb5.5.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'src/man/sssd-krb5.5.xml')

diff --git a/src/man/sssd-krb5.5.xml b/src/man/sssd-krb5.5.xml
index e9c2cac3..0238af1b 100644
--- a/src/man/sssd-krb5.5.xml
+++ b/src/man/sssd-krb5.5.xml
@@ -43,6 +43,14 @@
             page for the applicable identity provider for details on how to
             configure this.
         </para>
+        <para>
+            This backend also provides access control based on the .k5login
+            file in the home directory of the user. See <citerefentry>
+            <refentrytitle>.k5login</refentrytitle><manvolnum>5</manvolnum>
+            </citerefentry> for more details. Please note that an empty .k5login
+            file will deny all access to this user. To activate this feature
+            use 'access_provider = krb5' in your sssd configuration.
+        </para>
         <para>
             In the case where the UPN is not available in the identity backend
             <command>sssd</command> will construct a UPN using the format
-- 
cgit