diff options
author | Andreas Schneider <asn@samba.org> | 2018-02-14 12:05:16 +0100 |
---|---|---|
committer | Andreas Schneider <asn@cryptomilk.org> | 2018-02-14 20:32:18 +0100 |
commit | ebd88eb44192a28341579e4a4515bae479e7368a (patch) | |
tree | 13ebae1047186cdb23c23dfbbb1686dcbadf3bfc /docs-xml | |
parent | 36bb685abde872f43c3e23150119c3af91dea569 (diff) | |
download | samba-ebd88eb44192a28341579e4a4515bae479e7368a.tar.gz |
docs: Add a not that 'wbinfo --user-groups' may be incomplete
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Feb 14 20:32:18 CET 2018 on sn-devel-144
Diffstat (limited to 'docs-xml')
-rw-r--r-- | docs-xml/manpages/wbinfo.1.xml | 33 |
1 files changed, 29 insertions, 4 deletions
diff --git a/docs-xml/manpages/wbinfo.1.xml b/docs-xml/manpages/wbinfo.1.xml index c427007be0f..e2042ca623a 100644 --- a/docs-xml/manpages/wbinfo.1.xml +++ b/docs-xml/manpages/wbinfo.1.xml @@ -384,10 +384,35 @@ <varlistentry> <term>-r|--user-groups <replaceable>username</replaceable></term> - <listitem><para>Try to obtain the list of UNIX group ids - to which the user belongs. This only works for users - defined on a Domain Controller. - </para></listitem> + <listitem> + <para> + Try to obtain the list of UNIX group ids to which the + user belongs. This only works for users defined on a + Domain Controller. + </para> + + <para>There are two scenaries:</para> + <orderedlist> + <listitem> + <para> + User authenticated: When the user has been + authenticated, the access token for the user is + cached. The correct group memberships are then + returned from the cached user token (which can + be outdated). + </para> + </listitem> + + <listitem> + <para> + User *NOT* authenticated: The information is + queries from the domain controller using the + machine account credentials which have limited + permissions. The result is normally incomplete + and can be also incorrect. + </para></listitem> + </orderedlist> + </listitem> </varlistentry> <varlistentry> |