summaryrefslogtreecommitdiff
path: root/docs/smbdotconf
diff options
context:
space:
mode:
Diffstat (limited to 'docs/smbdotconf')
-rw-r--r--docs/smbdotconf/winbind/idmapbackend.xml10
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/smbdotconf/winbind/idmapbackend.xml b/docs/smbdotconf/winbind/idmapbackend.xml
index 0c22c4a44b..ad1c750954 100644
--- a/docs/smbdotconf/winbind/idmapbackend.xml
+++ b/docs/smbdotconf/winbind/idmapbackend.xml
@@ -11,8 +11,18 @@
to SID mappings. This avoids the risk of UID / GID inconsistencies across UNIX / Linux
systems that are sharing information over protocols other than SMB/CIFS (ie: NFS).
</para>
+
+ <para>
+ An alternate method of SID to UID / GID mapping can be achieved using the idmap_rid
+ plug-in. This plug-in uses the account RID to derive the UID and GID by adding the
+ RID to a base value specified. This utility requires that the parameter
+ <quote>allow trusted domains = No</quote> must be specified, as it is not compatible
+ with multiple domain environments. The idmap uid and idmap gid ranges must also be
+ specified.
+ </para>
</description>
<value type="default"></value>
<value type="example">ldap:ldap://ldapslave.example.com</value>
+<value type="example">idmap_rid:DOMNAME=1000-100000000</value>
</samba:parameter>