summaryrefslogtreecommitdiff
path: root/docs/yodldocs
diff options
context:
space:
mode:
authorLuke Leighton <lkcl@samba.org>1998-12-07 21:37:17 +0000
committerLuke Leighton <lkcl@samba.org>1998-12-07 21:37:17 +0000
commit699bae847f3a29514d06424bf20e98e96dd89d8a (patch)
tree300327d2a8c000d5153a499aaf04153c58687c7c /docs/yodldocs
parent54529fbd66a1adefbc0187ca4e594ff286f5f14f (diff)
downloadsamba-699bae847f3a29514d06424bf20e98e96dd89d8a.tar.gz
samba-699bae847f3a29514d06424bf20e98e96dd89d8a.tar.bz2
samba-699bae847f3a29514d06424bf20e98e96dd89d8a.zip
matthew chapman's ldap code, to date. plus docs!
(This used to be commit 2c438c86cbb38833b3abd4fbead6324687633b25)
Diffstat (limited to 'docs/yodldocs')
-rw-r--r--docs/yodldocs/smb.conf.5.yo102
1 files changed, 43 insertions, 59 deletions
diff --git a/docs/yodldocs/smb.conf.5.yo b/docs/yodldocs/smb.conf.5.yo
index 31c7b691f3..0fe510716d 100644
--- a/docs/yodldocs/smb.conf.5.yo
+++ b/docs/yodldocs/smb.conf.5.yo
@@ -547,13 +547,11 @@ it() link(bf(keepalive))(keepalive)
it() link(bf(kernel oplocks))(kerneloplocks)
-it() link(bf(ldap filter))(ldapfilter)
+it() link(bf(ldap bind as))(ldapbindas)
-it() link(bf(ldap port))(ldapport)
-
-it() link(bf(ldap root))(ldaproot)
+it() link(bf(ldap passwd file))(ldappasswdfile)
-it() link(bf(ldap root passwd))(ldaprootpasswd)
+it() link(bf(ldap port))(ldapport)
it() link(bf(ldap server))(ldapserver)
@@ -2595,73 +2593,55 @@ This parameter defaults to em("On") on systems that have the support,
and em("off") on systems that don't. You should never need to touch
this parameter.
-label(ldapfilter)
-dit(bf(ldap filter (G)))
+label(ldapbindas)
+dit(bf(ldap bind as (G)))
This parameter is part of the em(EXPERIMENTAL) Samba support for a
-password database stored on an LDAP server back-end. These options
-are only available if your version of Samba was configured with
-the bf(--with-ldap) option.
+password database stored on an LDAP server. These options are only
+available if your version of Samba was configured with the bf(--with-ldap)
+option.
-This parameter specifies an LDAP search filter used to search for a
-user name in the LDAP database. It must contain the string
-link(bf(%u))(percentU) which will be replaced with the user being
-searched for.
+This parameter specifies the entity to bind to an LDAP directory as.
+Usually it should be safe to use the LDAP root account; for larger
+installations it may be preferable to restrict Samba's access. See also
+link(bf(ldap passwd file))(ldappasswdfile).
bf(Default:)
-tt( empty string.)
-
-label(ldapport)
-dit(bf(ldap port (G)))
+tt( none (bind anonymously))
-This parameter is part of the em(EXPERIMENTAL) Samba support for a
-password database stored on an LDAP server back-end. These options
-are only available if your version of Samba was configured with
-the bf(--with-ldap) option.
-
-This parameter specifies the TCP port number to use to contact
-the LDAP server on.
-
- bf(Default:)
-tt( ldap port = 389.)
+ bf(Example:)
+tt( ldap bind as = "uid=root, dc=mydomain, dc=org")
-label(ldaproot)
-dit(bf(ldap root (G)))
+label(ldappasswdfile)
+dit(bf(ldap passwd file (G)))
This parameter is part of the em(EXPERIMENTAL) Samba support for a
-password database stored on an LDAP server back-end. These options
-are only available if your version of Samba was configured with
-the bf(--with-ldap) option.
+password database stored on an LDAP server. These options are only
+available if your version of Samba was configured with the bf(--with-ldap)
+option.
-This parameter specifies the entity to bind to the LDAP server
-as (essentially the LDAP username) in order to be able to perform
-queries and modifications on the LDAP database.
-
-See also link(bf(ldap root passwd))(ldaprootpasswd).
+This parameter specifies a file containing the password with which
+Samba should bind to an LDAP server. For obvious security reasons
+this file must be set to mode 700 or less.
bf(Default:)
-tt( empty string (no user defined))
-
-label(ldaprootpasswd)
-dit(bf(ldap root passwd (G)))
+tt( none (bind anonymously))
-This parameter is part of the em(EXPERIMENTAL) Samba support for a
-password database stored on an LDAP server back-end. These options
-are only available if your version of Samba was configured with
-the bf(--with-ldap) option.
+ bf(Example:)
+tt( ldap passwd file = /usr/local/samba/private/ldappasswd)
-This parameter specifies the password for the entity to bind to the
-LDAP server as (the password for this LDAP username) in order to be
-able to perform queries and modifications on the LDAP database.
+label(ldapport)
+dit(bf(ldap port (G)))
-em(BUGS:) This parameter should em(NOT) be a readable parameter
-in the bf(smb.conf) file and will be removed once a correct
-storage place is found.
+This parameter is part of the em(EXPERIMENTAL) Samba support for a
+password database stored on an LDAP server. These options are only
+available if your version of Samba was configured with the bf(--with-ldap)
+option.
-See also link(bf(ldap root))(ldaproot).
+This parameter specifies the TCP port number of the LDAP server.
bf(Default:)
-tt( empty string.)
+tt( ldap port = 389.)
label(ldapserver)
dit(bf(ldap server (G)))
@@ -2672,7 +2652,8 @@ are only available if your version of Samba was configured with
the bf(--with-ldap) option.
This parameter specifies the DNS name of the LDAP server to use
-for SMB/CIFS authentication purposes.
+when storing and retrieving information about Samba users and
+groups.
bf(Default:)
tt( ldap server = localhost)
@@ -2685,12 +2666,15 @@ password database stored on an LDAP server back-end. These options
are only available if your version of Samba was configured with
the bf(--with-ldap) option.
-This parameter specifies the tt("dn") or LDAP em("distinguished name")
-that tells url(bf(smbd))(smbd.8.html) to start from when searching
-for an entry in the LDAP password database.
+This parameter specifies the node of the LDAP tree beneath which
+Samba should store its information. This parameter MUST be provided
+when using LDAP with Samba.
bf(Default:)
-tt( empty string.)
+tt( none)
+
+ bf(Example:)
+tt( ldap suffix = "dc=mydomain, dc=org")
label(lmannounce)
dit(bf(lm announce (G)))