diff options
Diffstat (limited to 'docs/manpages/smbgroupedit.8')
| -rw-r--r-- | docs/manpages/smbgroupedit.8 | 68 |
1 files changed, 31 insertions, 37 deletions
diff --git a/docs/manpages/smbgroupedit.8 b/docs/manpages/smbgroupedit.8 index 9f01fcaaea..3ee7980e5d 100644 --- a/docs/manpages/smbgroupedit.8 +++ b/docs/manpages/smbgroupedit.8 @@ -1,21 +1,22 @@ -.\" This manpage has been automatically generated by docbook2man-spec -.\" from a DocBook document. docbook2man-spec can be found at: -.\" <http://shell.ipoline.com/~elmert/hacks/docbook2X/> +.\" This manpage has been automatically generated by docbook2man +.\" from a DocBook document. This tool can be found at: +.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/> .\" Please send any bug reports, improvements, comments, patches, .\" etc. to Steve Cheng <steve@ggi-project.org>. -.TH "SMBGROUPEDIT" "8" "28 January 2002" "" "" +.TH "SMBGROUPEDIT" "8" "01 October 2002" "" "" .SH NAME smbgroupedit \- Query/set/change UNIX - Windows NT group mapping .SH SYNOPSIS -.sp -\fBsmbroupedit\fR [ \fB-v [l|s]\fR ] [ \fB-a UNIX-groupname [-d NT-groupname|-p prividge|\fR ] + +\fBsmbroupedit\fR [ \fB-v [l|s]\fR ] [ \fB-a UNIX-groupname [-d NT-groupname|-p privilege|]\fR ] + .SH "DESCRIPTION" .PP This program is part of the Samba suite. .PP -The smbgroupedit command allows for mapping unix groups -to NT Builtin, Domain, or Local groups. Also +The smbgroupedit command allows for mapping unix groups +to NT Builtin, Domain, or Local groups. Also allows setting privileges for that group, such as saAddUser, etc. .SH "OPTIONS" @@ -28,7 +29,7 @@ in the Windows NT domain in which samba is operating. \fB-l\fR give a long listing, of the format: -.sp + .nf "NT Group Name" SID : @@ -36,37 +37,33 @@ give a long listing, of the format: Group type : Comment : Privilege : -.sp .fi For examples, -.sp + .nf Users - SID : S-1-5-32-545 + SID : S-1-5-32-545 Unix group: -1 Group type: Local group - Comment : + Comment : Privilege : No privilege -.sp .fi .TP \fB-s\fR display a short listing of the format: -.sp + .nf NTGroupName(SID) -> UnixGroupName -.sp .fi For example, -.sp + .nf Users (S-1-5-32-545) -> -1 -.sp .fi .RE .SH "FILES" @@ -79,67 +76,64 @@ of a failure. .SH "EXAMPLES" .PP To make a subset of your samba PDC users members of -the 'Domain Admins' Global group: -.IP 1. +the 'Domain Admins' Global group: +.TP 3 +1. create a unix group (usually in \fI/etc/group\fR), let's call it domadm. -.IP 2. +.TP 3 +2. add to this group the users that you want to be domain administrators. For example if you want joe, john and mary, your entry in \fI/etc/group\fR will look like: domadm:x:502:joe,john,mary -.IP 3. +.TP 3 +3. map this domadm group to the 'domain admins' group: .RS -.IP 1. +.TP 3 +1. Get the SID for the Windows NT "Domain Admins" group: -.sp + .nf root# \fBsmbgroupedit -vs | grep "Domain Admins"\fR Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1 -.sp .fi -.IP 2. +.TP 3 +2. map the unix domadm group to the Windows NT "Domain Admins" group, by running the command: -.sp + .nf root# \fBsmbgroupedit \\ -c S-1-5-21-1108995562-3116817432-1375597819-512 \\ -u domadm\fR -.sp .fi \fBwarning:\fR don't copy and paste this sample, the Domain Admins SID (the S-1-5-21-...-512) is different for every PDC. .RE .PP -To verify that you mapping has taken effect: -.PP +To verify that your mapping has taken effect: .PP -.sp + .nf root# \fBsmbgroupedit -vs|grep "Domain Admins"\fR Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm -.sp .fi .PP -.PP To give access to a certain directory on a domain member machine (an NT/W2K or a samba server running winbind) to some users who are member of a group on your samba PDC, flag that group as a domain group: .PP -.PP -.sp + .nf root# \fBsmbgroupedit -a unixgroup -td\fR -.sp .fi -.PP .SH "VERSION" .PP This man page is correct for the 3.0alpha releases of |