diff options
author | Simo Sorce <idra@samba.org> | 2007-03-21 21:45:10 +0000 |
---|---|---|
committer | Gerald W. Carter <jerry@samba.org> | 2008-04-23 08:47:30 -0500 |
commit | 812b69a496b27302e63ba19fb160cfcc6a039b17 (patch) | |
tree | 5283d2c6452fb8ecab4a23d792432ea73141d598 /docs/manpages-3/idmap_rid.8.xml | |
parent | aee8329209829fc660529372d26608ee9a29fbfb (diff) | |
download | samba-812b69a496b27302e63ba19fb160cfcc6a039b17.tar.gz samba-812b69a496b27302e63ba19fb160cfcc6a039b17.tar.bz2 samba-812b69a496b27302e63ba19fb160cfcc6a039b17.zip |
Fix idmap_ad sgml
Fill in idmap_rid template
(This used to be commit 4ce88d5974f440527e21de65121f037b9a9f31cd)
Diffstat (limited to 'docs/manpages-3/idmap_rid.8.xml')
-rw-r--r-- | docs/manpages-3/idmap_rid.8.xml | 46 |
1 files changed, 42 insertions, 4 deletions
diff --git a/docs/manpages-3/idmap_rid.8.xml b/docs/manpages-3/idmap_rid.8.xml index fc3ad91d21..1248cf29fe 100644 --- a/docs/manpages-3/idmap_rid.8.xml +++ b/docs/manpages-3/idmap_rid.8.xml @@ -15,18 +15,56 @@ <refsynopsisdiv> <title>DESCRIPTION</title> - - <para>TODO</para> + <para>The idmap_rid backend provides a way to use an algorithmic + mapping scheme to map UIDs/GIDs and SIDs. No database is required + in this case as the mapping is deterministic.</para> </refsynopsisdiv> <refsect1> <title>IDMAP OPTIONS</title> - <para>TODO</para> + + <variablelist> + <varlistentry> + <term>range = low - high</term> + <listitem><para> + Defines the available matching uid and gid range for which the + backend is authoritative. Note that the range acts as a filter. + If algorithmically determined UID or GID fall outside the + range, they are ignored and the corresponding map is discarded. + It is intended as a way to avoid accidental UID/GID overlaps + between local and remotely defined IDs. + </para></listitem> + </varlistentry> + + <varlistentry> + <term>base_rid = INTEGER</term> + <listitem><para> + Defines the base integer used to build SIDs out of an UID or a GID, + and to rebase the UID or GID to be obtained froma SID. User RIDs + by default starts at 1000 (512 hexadecimal), this means a good value + for base_rid can be 1000 as the resulting ID is calculated this way: + ID = RID - BASE_RID + LOW RANGE ID. + </para></listitem> + </varlistentry> + </variablelist> </refsect1> <refsect1> <title>EXAMPLES</title> - <para>TODO</para> + <para>This example shows how to configure 2 domains with idmap_rid</para> + + <programlisting> + [global] + idmap domain = MAIN TRUSTED1 + + idmap config MAIN:backend = rid + idmap config MAIN:base_rid = 1000 + idmap config MAIN:range = 10000 - 49999 + + idmap config TRUSTED1:backend = rid + idmap config TRUSTED1:base_rid = 1000 + idmap config TRUSTED1:range = 50000 - 99999 + </programlisting> </refsect1> <refsect1> |