summaryrefslogtreecommitdiff
path: root/docs/smbdotconf/security
diff options
context:
space:
mode:
authorGerald Carter <jerry@samba.org>2005-06-14 14:33:47 +0000
committerGerald W. Carter <jerry@samba.org>2008-04-23 08:46:48 -0500
commitf75a6fddf064d8e1ce436d3e4457a4aaca0904bd (patch)
treeb023e8a95757e8dda7f2cb6b407150bd7eff0c74 /docs/smbdotconf/security
parent6d6cb2f0a3db32812b650b813a532e8ee66c5c96 (diff)
downloadsamba-f75a6fddf064d8e1ce436d3e4457a4aaca0904bd.tar.gz
samba-f75a6fddf064d8e1ce436d3e4457a4aaca0904bd.tar.bz2
samba-f75a6fddf064d8e1ce436d3e4457a4aaca0904bd.zip
clarifying 'map to guest = bad uid'
(This used to be commit 81e49da90d10408eb39293eb00bcd7109ad7b7a9)
Diffstat (limited to 'docs/smbdotconf/security')
-rw-r--r--docs/smbdotconf/security/maptoguest.xml7
1 files changed, 5 insertions, 2 deletions
diff --git a/docs/smbdotconf/security/maptoguest.xml b/docs/smbdotconf/security/maptoguest.xml
index 57f0000f44..8993959073 100644
--- a/docs/smbdotconf/security/maptoguest.xml
+++ b/docs/smbdotconf/security/maptoguest.xml
@@ -46,9 +46,12 @@
<listitem>
<para><constant>Bad Uid</constant> - Is only applicable when Samba is configured
in some type of domain mode security (security = {domain|ads}) and means that
- user logins which are successfully authenticated but which have no valid
+ user logins which are successfully authenticated but which have no valid Unix
user account (and smbd is unable to create one) should be mapped to the defined
- guest account. This was the default behavior of Samba 2.x releases.</para>
+ guest account. This was the default behavior of Samba 2.x releases. Note that
+ if a member server is running winbindd, this option should never be required
+ because the nss_winbind library will export the Windows domain users and groups
+ to the underlying OS via the Name Service Switch interface.</para>
</listitem>
</itemizedlist>