diff options
Diffstat (limited to 'docs-xml/smbdotconf/winbind/idmapbackend.xml')
-rw-r--r-- | docs-xml/smbdotconf/winbind/idmapbackend.xml | 35 |
1 files changed, 29 insertions, 6 deletions
diff --git a/docs-xml/smbdotconf/winbind/idmapbackend.xml b/docs-xml/smbdotconf/winbind/idmapbackend.xml index 10c4cb30a4..b5e86945b8 100644 --- a/docs-xml/smbdotconf/winbind/idmapbackend.xml +++ b/docs-xml/smbdotconf/winbind/idmapbackend.xml @@ -6,14 +6,37 @@ <description> <para> The idmap backend provides a plugin interface for Winbind to use - varying backends to store SID/uid/gid mapping tables. This - option is mutually exclusive with the newer and more flexible - <smbconfoption name="idmap domains"/> parameter. The main difference - between the "idmap backend" and the "idmap domains" - is that the former only allows one backend for all domains while the - latter supports configuring backends on a per domain basis. + varying backends to store SID/uid/gid mapping tables. </para> + <para> + This option specifies the default backend that is used when no special + configuration set by <smbconfoption name="idmap config"/> matches the + specific request. + </para> + + <para> + This default backend also specifies the place where winbind-generated + idmap entries will be stored. So it is highly recommended that you + specify a writable backend like <citerefentry> + <refentrytitle>idmap_tdb</refentrytitle> <manvolnum>8</manvolnum> + </citerefentry> or <citerefentry> + <refentrytitle>idmap_ldap</refentrytitle> <manvolnum>8</manvolnum> + </citerefentry> as the idmap backend. The <citerefentry> + <refentrytitle>idmap_rid</refentrytitle> <manvolnum>8</manvolnum> + </citerefentry> and <citerefentry> + <refentrytitle>idmap_ad</refentrytitle> <manvolnum>8</manvolnum> + </citerefentry> backends are not writable and thus will generate + unexpected results if set as idmap backend. + </para> + + <para> + To use the rid and ad backends, please specify them via the + <smbconfoption name="idmap config"/> parameter, possibly also for the + domain your machine is member of, specified by <smbconfoption + name="workgroup">. + <para> + <para>Examples of SID/uid/gid backends include tdb (<citerefentry> <refentrytitle>idmap_tdb</refentrytitle><manvolnum>8</manvolnum></citerefentry>), ldap (<citerefentry><refentrytitle>idmap_ldap</refentrytitle> |