summaryrefslogtreecommitdiff
path: root/docs/manpages/smbgroupedit.8
diff options
context:
space:
mode:
Diffstat (limited to 'docs/manpages/smbgroupedit.8')
-rw-r--r--docs/manpages/smbgroupedit.868
1 files changed, 31 insertions, 37 deletions
diff --git a/docs/manpages/smbgroupedit.8 b/docs/manpages/smbgroupedit.8
index 9f01fcaaea..3ee7980e5d 100644
--- a/docs/manpages/smbgroupedit.8
+++ b/docs/manpages/smbgroupedit.8
@@ -1,21 +1,22 @@
-.\" This manpage has been automatically generated by docbook2man-spec
-.\" from a DocBook document. docbook2man-spec can be found at:
-.\" <http://shell.ipoline.com/~elmert/hacks/docbook2X/>
+.\" This manpage has been automatically generated by docbook2man
+.\" from a DocBook document. This tool can be found at:
+.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <steve@ggi-project.org>.
-.TH "SMBGROUPEDIT" "8" "28 January 2002" "" ""
+.TH "SMBGROUPEDIT" "8" "01 October 2002" "" ""
.SH NAME
smbgroupedit \- Query/set/change UNIX - Windows NT group mapping
.SH SYNOPSIS
-.sp
-\fBsmbroupedit\fR [ \fB-v [l|s]\fR ] [ \fB-a UNIX-groupname [-d NT-groupname|-p prividge|\fR ]
+
+\fBsmbroupedit\fR [ \fB-v [l|s]\fR ] [ \fB-a UNIX-groupname [-d NT-groupname|-p privilege|]\fR ]
+
.SH "DESCRIPTION"
.PP
This program is part of the Samba
suite.
.PP
-The smbgroupedit command allows for mapping unix groups
-to NT Builtin, Domain, or Local groups. Also
+The smbgroupedit command allows for mapping unix groups
+to NT Builtin, Domain, or Local groups. Also
allows setting privileges for that group, such as saAddUser,
etc.
.SH "OPTIONS"
@@ -28,7 +29,7 @@ in the Windows NT domain in which samba is operating.
\fB-l\fR
give a long listing, of the format:
-.sp
+
.nf
"NT Group Name"
SID :
@@ -36,37 +37,33 @@ give a long listing, of the format:
Group type :
Comment :
Privilege :
-.sp
.fi
For examples,
-.sp
+
.nf
Users
- SID : S-1-5-32-545
+ SID : S-1-5-32-545
Unix group: -1
Group type: Local group
- Comment :
+ Comment :
Privilege : No privilege
-.sp
.fi
.TP
\fB-s\fR
display a short listing of the format:
-.sp
+
.nf
NTGroupName(SID) -> UnixGroupName
-.sp
.fi
For example,
-.sp
+
.nf
Users (S-1-5-32-545) -> -1
-.sp
.fi
.RE
.SH "FILES"
@@ -79,67 +76,64 @@ of a failure.
.SH "EXAMPLES"
.PP
To make a subset of your samba PDC users members of
-the 'Domain Admins' Global group:
-.IP 1.
+the 'Domain Admins' Global group:
+.TP 3
+1.
create a unix group (usually in
\fI/etc/group\fR), let's call it domadm.
-.IP 2.
+.TP 3
+2.
add to this group the users that you want to be
domain administrators. For example if you want joe, john and mary,
your entry in \fI/etc/group\fR will look like:
domadm:x:502:joe,john,mary
-.IP 3.
+.TP 3
+3.
map this domadm group to the 'domain admins' group:
.RS
-.IP 1.
+.TP 3
+1.
Get the SID for the Windows NT "Domain Admins"
group:
-.sp
+
.nf
root# \fBsmbgroupedit -vs | grep "Domain Admins"\fR
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1
-.sp
.fi
-.IP 2.
+.TP 3
+2.
map the unix domadm group to the Windows NT
"Domain Admins" group, by running the command:
-.sp
+
.nf
root# \fBsmbgroupedit \\
-c S-1-5-21-1108995562-3116817432-1375597819-512 \\
-u domadm\fR
-.sp
.fi
\fBwarning:\fR don't copy and paste this sample, the
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
.RE
.PP
-To verify that you mapping has taken effect:
-.PP
+To verify that your mapping has taken effect:
.PP
-.sp
+
.nf
root# \fBsmbgroupedit -vs|grep "Domain Admins"\fR
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm
-.sp
.fi
.PP
-.PP
To give access to a certain directory on a domain member machine (an
NT/W2K or a samba server running winbind) to some users who are member
of a group on your samba PDC, flag that group as a domain group:
.PP
-.PP
-.sp
+
.nf
root# \fBsmbgroupedit -a unixgroup -td\fR
-.sp
.fi
-.PP
.SH "VERSION"
.PP
This man page is correct for the 3.0alpha releases of