summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--docs/docbook/manpages/smb.conf.5.sgml8
-rw-r--r--source3/utils/testparm.c9
2 files changed, 15 insertions, 2 deletions
diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml
index 1567087d9e..3cea2d51bc 100644
--- a/docs/docbook/manpages/smb.conf.5.sgml
+++ b/docs/docbook/manpages/smb.conf.5.sgml
@@ -8078,8 +8078,12 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/
and <filename>nss_winbind.so</filename> modules for UNIX services.
</para>
- <para>Example: <command>winbind separator = \</command></para>
- <para>Example: <command>winbind separator = +</command></para>
+ <para>Please note that setting this parameter to + causes problems
+ with group membership at least on glibc systems, as the character +
+ is used as a special character for NIS in /etc/group.</para>
+
+ <para>Example: <command>winbind separator = \\</command></para>
+ <para>Example: <command>winbind separator = /</command></para>
</listitem>
</varlistentry>
diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c
index defde6cb2c..c6e417a2bc 100644
--- a/source3/utils/testparm.c
+++ b/source3/utils/testparm.c
@@ -152,6 +152,15 @@ via the %%o substitution. With encrypted passwords this is not possible.\n", lp_
}
}
+ if (strlen(lp_winbind_separator()) != 1) {
+ printf("ERROR: the 'winbind separator' parameter must be a single character.\n");
+ ret = 1;
+ }
+
+ if (*lp_winbind_separator() == '+') {
+ printf("'winbind separator = +' might cause problems with group membership.\n");
+ }
+
return ret;
}