summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--docs/htmldocs/winbindd.8.html19
-rw-r--r--docs/manpages/winbindd.827
-rw-r--r--docs/yodldocs/winbindd.8.yo27
3 files changed, 73 insertions, 0 deletions
diff --git a/docs/htmldocs/winbindd.8.html b/docs/htmldocs/winbindd.8.html
index d9e8017daa..0e0d70c2f4 100644
--- a/docs/htmldocs/winbindd.8.html
+++ b/docs/htmldocs/winbindd.8.html
@@ -149,6 +149,25 @@ database is not actively changing <strong>winbindd</strong> will only have to se
sequence number query packet every "winbind cache time" seconds.
<p><strong>Default:</strong>
<code> winbind cache time = 15</code>
+<p><p></p><dt><strong>winbind enum users</strong><dd>
+<p>On large installations it may be necessary to suppress the enumeration of
+users through the <code>setpwent</code>, <code>getpwent</code> and <code>endpwent</code> group of
+system calls. If the <code>winbind enum users</code> parameter is false, calls to
+the <code>getpwent</code> system call will not return any data.
+<p>Warning: Turning off user enumeration may cause some programs to behave
+oddly. For example, the finger program relies on having access to the full
+user list when searching for matching usernames.
+<p><strong>Default:</strong>
+<code> winbind enum users = true</code>
+<p><p></p><dt><strong>winbind enum groups</strong><dd>
+<p>On large installations it may be necessary to suppress the enumeration of
+groups through the <code>setgrent</code>, <code>getgrent</code> and <code>endgrent</code> group of
+system calls. If the <code>winbind enum groups</code> parameter is false, calls to
+the <code>getgrent</code> system call will not return any data.
+<p>Warning: Turning off group enumeration may cause some programs to behave
+oddly.
+<p><strong>Default:</strong>
+<code> winbind enum groups = true</code>
<p><p></p><dt><strong>template homedir</strong><dd>
<p>When filling out the user information for a Windows NT user, the
<strong>winbindd</strong> daemon uses this parameter to fill in the home directory for
diff --git a/docs/manpages/winbindd.8 b/docs/manpages/winbindd.8
index c2c890d0b8..9655f51bee 100644
--- a/docs/manpages/winbindd.8
+++ b/docs/manpages/winbindd.8
@@ -161,6 +161,33 @@ sequence number query packet every "winbind cache time" seconds\&.
\fBDefault:\fP
\f(CW winbind cache time = 15\fP
.IP
+.IP "winbind enum users"
+.IP
+On large installations it may be necessary to suppress the enumeration of
+users through the \f(CWsetpwent\fP, \f(CWgetpwent\fP and \f(CWendpwent\fP group of
+system calls\&. If the \f(CWwinbind enum users\fP parameter is false, calls to
+the \f(CWgetpwent\fP system call will not return any data\&.
+.IP
+Warning: Turning off user enumeration may cause some programs to behave
+oddly\&. For example, the finger program relies on having access to the full
+user list when searching for matching usernames\&.
+.IP
+\fBDefault:\fP
+\f(CW winbind enum users = true\fP
+.IP
+.IP "winbind enum groups"
+.IP
+On large installations it may be necessary to suppress the enumeration of
+groups through the \f(CWsetgrent\fP, \f(CWgetgrent\fP and \f(CWendgrent\fP group of
+system calls\&. If the \f(CWwinbind enum groups\fP parameter is false, calls to
+the \f(CWgetgrent\fP system call will not return any data\&.
+.IP
+Warning: Turning off group enumeration may cause some programs to behave
+oddly\&.
+.IP
+\fBDefault:\fP
+\f(CW winbind enum groups = true\fP
+.IP
.IP "template homedir"
.IP
When filling out the user information for a Windows NT user, the
diff --git a/docs/yodldocs/winbindd.8.yo b/docs/yodldocs/winbindd.8.yo
index 41f566b4d2..a2128be393 100644
--- a/docs/yodldocs/winbindd.8.yo
+++ b/docs/yodldocs/winbindd.8.yo
@@ -168,6 +168,33 @@ sequence number query packet every "winbind cache time" seconds.
bf(Default:)
tt( winbind cache time = 15)
+dit(winbind enum users)
+
+On large installations it may be necessary to suppress the enumeration of
+users through the tt(setpwent), tt(getpwent) and tt(endpwent) group of
+system calls. If the tt(winbind enum users) parameter is false, calls to
+the tt(getpwent) system call will not return any data.
+
+Warning: Turning off user enumeration may cause some programs to behave
+oddly. For example, the finger program relies on having access to the full
+user list when searching for matching usernames.
+
+ bf(Default:)
+tt( winbind enum users = true)
+
+dit(winbind enum groups)
+
+On large installations it may be necessary to suppress the enumeration of
+groups through the tt(setgrent), tt(getgrent) and tt(endgrent) group of
+system calls. If the tt(winbind enum groups) parameter is false, calls to
+the tt(getgrent) system call will not return any data.
+
+Warning: Turning off group enumeration may cause some programs to behave
+oddly.
+
+ bf(Default:)
+tt( winbind enum groups = true)
+
dit(template homedir)
When filling out the user information for a Windows NT user, the