summaryrefslogtreecommitdiff
path: root/docs-xml/smbdotconf/winbind/idmapbackend.xml
diff options
context:
space:
mode:
authorVolker Lendecke <vl@samba.org>2008-07-17 14:05:57 +0200
committerVolker Lendecke <vl@samba.org>2008-08-12 11:28:29 +0200
commit59e53cedcb7cf95fd1f66111c15be714f7d6b1f1 (patch)
treec466e5221b256b937defa3ce3f7ac9b079ba29c1 /docs-xml/smbdotconf/winbind/idmapbackend.xml
parent18bc97287cbaffb03a54c0b1e635d443a3d54d8d (diff)
downloadsamba-59e53cedcb7cf95fd1f66111c15be714f7d6b1f1.tar.gz
samba-59e53cedcb7cf95fd1f66111c15be714f7d6b1f1.tar.bz2
samba-59e53cedcb7cf95fd1f66111c15be714f7d6b1f1.zip
Document idmap rewrite
(This used to be commit 4b9132e8bd1b2bc397b657ef07796f44d55f33da)
Diffstat (limited to 'docs-xml/smbdotconf/winbind/idmapbackend.xml')
-rw-r--r--docs-xml/smbdotconf/winbind/idmapbackend.xml35
1 files changed, 29 insertions, 6 deletions
diff --git a/docs-xml/smbdotconf/winbind/idmapbackend.xml b/docs-xml/smbdotconf/winbind/idmapbackend.xml
index 10c4cb30a4..b5e86945b8 100644
--- a/docs-xml/smbdotconf/winbind/idmapbackend.xml
+++ b/docs-xml/smbdotconf/winbind/idmapbackend.xml
@@ -6,14 +6,37 @@
<description>
<para>
The idmap backend provides a plugin interface for Winbind to use
- varying backends to store SID/uid/gid mapping tables. This
- option is mutually exclusive with the newer and more flexible
- <smbconfoption name="idmap domains"/> parameter. The main difference
- between the &quot;idmap backend&quot; and the &quot;idmap domains&quot;
- is that the former only allows one backend for all domains while the
- latter supports configuring backends on a per domain basis.
+ varying backends to store SID/uid/gid mapping tables.
</para>
+ <para>
+ This option specifies the default backend that is used when no special
+ configuration set by <smbconfoption name="idmap config"/> matches the
+ specific request.
+ </para>
+
+ <para>
+ This default backend also specifies the place where winbind-generated
+ idmap entries will be stored. So it is highly recommended that you
+ specify a writable backend like <citerefentry>
+ <refentrytitle>idmap_tdb</refentrytitle> <manvolnum>8</manvolnum>
+ </citerefentry> or <citerefentry>
+ <refentrytitle>idmap_ldap</refentrytitle> <manvolnum>8</manvolnum>
+ </citerefentry> as the idmap backend. The <citerefentry>
+ <refentrytitle>idmap_rid</refentrytitle> <manvolnum>8</manvolnum>
+ </citerefentry> and <citerefentry>
+ <refentrytitle>idmap_ad</refentrytitle> <manvolnum>8</manvolnum>
+ </citerefentry> backends are not writable and thus will generate
+ unexpected results if set as idmap backend.
+ </para>
+
+ <para>
+ To use the rid and ad backends, please specify them via the
+ <smbconfoption name="idmap config"/> parameter, possibly also for the
+ domain your machine is member of, specified by <smbconfoption
+ name="workgroup">.
+ <para>
+
<para>Examples of SID/uid/gid backends include tdb (<citerefentry>
<refentrytitle>idmap_tdb</refentrytitle><manvolnum>8</manvolnum></citerefentry>),
ldap (<citerefentry><refentrytitle>idmap_ldap</refentrytitle>