samba-tool delegation: Clarify msDS-AllowedToDelegateTo delegation command documentation

This makes the difference between msDS-AllowedToDelegateTo and
msDS-AllowedToActOnBehalfOfOtherIdentity more clear.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14954

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/netcmd/delegation.py b/python/samba/netcmd/delegation.py
index a8c36b8e96abff7404e7b93944e07ea0f2265978..15947cc67a3ba1c147e8052f2fa87b59016f0476 100644 (file)
--- a/python/samba/netcmd/delegation.py
+++ b/python/samba/netcmd/delegation.py
@@ -293,7 +293,7 @@ class cmd_delegation_for_any_protocol(Command):
 
 
 class cmd_delegation_add_service(Command):
-    """Add a service principal as msDS-AllowedToDelegateTo."""
+    """Add a service principal to msDS-AllowedToDelegateTo so that an account may delegate to it."""
 
     synopsis = "%prog <accountname> <principal> [options]"
 
@@ -347,7 +347,7 @@ class cmd_delegation_add_service(Command):
 
 
 class cmd_delegation_del_service(Command):
-    """Delete a service principal as msDS-AllowedToDelegateTo."""
+    """Delete a service principal from msDS-AllowedToDelegateTo so that an account may no longer delegate to it."""
 
     synopsis = "%prog <accountname> <principal> [options]"