summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAbhidnya Joshi <achirmul@in.ibm.com>2013-04-16 16:41:45 +0530
committerChristian Ambach <ambi@samba.org>2013-05-06 16:33:39 +0200
commit5190e4da2b51fdfa6df452a23127add5059cc4ac (patch)
treeb97c7633cfdca1e72999c70c62dc65676d807ee8
parentb384c55bf3fa230a945f36c493427f2341051cd1 (diff)
downloadsamba-5190e4da2b51fdfa6df452a23127add5059cc4ac.tar.gz
samba-5190e4da2b51fdfa6df452a23127add5059cc4ac.tar.bz2
samba-5190e4da2b51fdfa6df452a23127add5059cc4ac.zip
docs-xml: manpage update for autorid multirange support
Signed-off-by: Abhidnya Joshi <achirmul@in.ibm.com> Reviewed-by: Christian Ambach <ambi@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
-rw-r--r--docs-xml/manpages/idmap_autorid.8.xml34
1 files changed, 22 insertions, 12 deletions
diff --git a/docs-xml/manpages/idmap_autorid.8.xml b/docs-xml/manpages/idmap_autorid.8.xml
index ed698e91db..8ce281d10d 100644
--- a/docs-xml/manpages/idmap_autorid.8.xml
+++ b/docs-xml/manpages/idmap_autorid.8.xml
@@ -40,17 +40,21 @@
<varlistentry>
<term>rangesize = numberofidsperdomain</term>
<listitem><para>
- Defines the available number of uids/gids per domain. The
- minimum needed value is 2000. SIDs with RIDs larger than this
- value cannot be mapped, are ignored and the corresponding map
- is discarded. Choose this value carefully, as this should
- not be changed after the first ranges for domains have been
- defined, otherwise mappings between domains will get intermixed
- leading to unpredictable results. Please note that RIDs in Windows
- Domains usually start with 500 for builtin users and 1000
- for regular users. As the parameter cannot be changed later, please
- plan accordingly for your expected number of users in a domain
- with safety margins.
+ Defines the number of uids/gids available per
+ domain range. The minimum needed value is 2000.
+ SIDs with RIDs larger than this value will be mapped
+ into extension ranges depending upon number of available
+ ranges. If the autorid backend runs out of available
+ ranges, mapping requests for new domains (or new
+ extension ranges for domains already known) are ignored
+ and the corresponding map is discarded.
+ </para>
+ <para>
+ Example: with rangesize set to 10000, users/groups with
+ a RID up to 10000 will be put into the first range for the
+ domain. When attempting to map the an object with a RID
+ of 25000, an extension range will be allocated that
+ will then be used to map all RIDs from 20000-29999.
</para>
<para>One range will be used for local users and groups and for
non-domain well-known SIDs like Everyone (S-1-1-0) or Creator Owner (S-1-3-0).
@@ -85,6 +89,7 @@
The Unix ID for a RID is calculated this way:
<programlisting>
ID = IDMAP UID LOW VALUE + DOMAINRANGENUMBER * RANGESIZE + RID
+ - (MULTIPLIER * RANGESIZE)
</programlisting>
</para>
<para>
@@ -92,15 +97,20 @@
given Unix ID is this:
<programlisting>
RID = ID - IDMAP UID LOW VALUE - DOMAINRANGENUMBER * RANGESIZE
+ + (MULTIPLIER * RANGESIZE)
</programlisting>
</para>
+ <para>
+ MULTIPLIER is calculated as FLOOR(RID / RANGESIZE).
+ </para>
</refsect1>
<refsect1>
<title>EXAMPLES</title>
<para>
This example shows you the minimal configuration that will
- work for the principial domain and 19 trusted domains.
+ work for the principial domain and 19 trusted domains / range
+ extensions.
</para>
<programlisting>