From f31dca91d2ae2329e854251121553df0ee991bc0 Mon Sep 17 00:00:00 2001 From: Russ Allbery Date: Wed, 27 Mar 2013 20:34:08 -0700 Subject: Update the comment in README about supported ACL types Change-Id: I171722d03bebc812bb113d1366457d75a94e468a Reviewed-on: https://gerrit.stanford.edu/991 Reviewed-by: Russ Allbery Tested-by: Russ Allbery --- README | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README b/README index 2a96bd0..37fb814 100644 --- a/README +++ b/README @@ -39,8 +39,8 @@ DESCRIPTION ACL controls access to administrative actions. An ACL consists of zero or more entries, each of which is a generic scheme and identifier pair, allowing the ACL system to be extended to use any existing authorization - infrastructure. Currently, the only ACL type supported matches a single - Kerberos principal name, but this will be extended in future releases. + infrastructure. Supported ACL types include Kerberos principal names, + regexes matching Kerberos principal names, and LDAP attribute checks. Currently, the object types supported are simple files, Kerberos keytabs, and WebAuth keyrings. By default, whenever a Kerberos keytab -- cgit v1.2.3