summaryrefslogtreecommitdiff
path: root/docs-xml
diff options
context:
space:
mode:
authorAndreas Schneider <asn@samba.org>2018-02-14 12:05:16 +0100
committerAndreas Schneider <asn@cryptomilk.org>2018-02-14 20:32:18 +0100
commitebd88eb44192a28341579e4a4515bae479e7368a (patch)
tree13ebae1047186cdb23c23dfbbb1686dcbadf3bfc /docs-xml
parent36bb685abde872f43c3e23150119c3af91dea569 (diff)
downloadsamba-ebd88eb44192a28341579e4a4515bae479e7368a.tar.gz
docs: Add a not that 'wbinfo --user-groups' may be incomplete
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Feb 14 20:32:18 CET 2018 on sn-devel-144
Diffstat (limited to 'docs-xml')
-rw-r--r--docs-xml/manpages/wbinfo.1.xml33
1 files changed, 29 insertions, 4 deletions
diff --git a/docs-xml/manpages/wbinfo.1.xml b/docs-xml/manpages/wbinfo.1.xml
index c427007be0f..e2042ca623a 100644
--- a/docs-xml/manpages/wbinfo.1.xml
+++ b/docs-xml/manpages/wbinfo.1.xml
@@ -384,10 +384,35 @@
<varlistentry>
<term>-r|--user-groups <replaceable>username</replaceable></term>
- <listitem><para>Try to obtain the list of UNIX group ids
- to which the user belongs. This only works for users
- defined on a Domain Controller.
- </para></listitem>
+ <listitem>
+ <para>
+ Try to obtain the list of UNIX group ids to which the
+ user belongs. This only works for users defined on a
+ Domain Controller.
+ </para>
+
+ <para>There are two scenaries:</para>
+ <orderedlist>
+ <listitem>
+ <para>
+ User authenticated: When the user has been
+ authenticated, the access token for the user is
+ cached. The correct group memberships are then
+ returned from the cached user token (which can
+ be outdated).
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ User *NOT* authenticated: The information is
+ queries from the domain controller using the
+ machine account credentials which have limited
+ permissions. The result is normally incomplete
+ and can be also incorrect.
+ </para></listitem>
+ </orderedlist>
+ </listitem>
</varlistentry>
<varlistentry>