From 09a3e34e0610235e9ba0fd76e2bb53747191b9d7 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Fri, 27 Sep 2002 16:43:34 +0000 Subject: Apply Vance Lankhaars' cifs2002 documentation patch - mostly grammar and English typo fixes and updates of documentation (This used to be commit cf240f14a53d95261c557a881cf67c7d3d316a57) --- docs/docbook/manpages/winbindd.8.sgml | 174 +++++----------------------------- 1 file changed, 22 insertions(+), 152 deletions(-) (limited to 'docs/docbook/manpages/winbindd.8.sgml') diff --git a/docs/docbook/manpages/winbindd.8.sgml b/docs/docbook/manpages/winbindd.8.sgml index 0325f9bfe1..32ea86b0d6 100644 --- a/docs/docbook/manpages/winbindd.8.sgml +++ b/docs/docbook/manpages/winbindd.8.sgml @@ -46,10 +46,10 @@ The pam_winbind module in the 2.2.2 release only supports the auth and account - module-types. The latter is simply + module-types. The latter simply performs a getpwnam() to verify that the system can obtain a uid for the user. If the libnss_winbind library has been correctly - installed, this should always suceed. + installed, this should always succeed. The following nsswitch databases are implemented by @@ -156,156 +156,26 @@ group: files winbind file. All parameters should be specified in the [global] section of smb.conf. - - - winbind separator - The winbind separator option allows you - to specify how NT domain names and user names are combined - into unix user names when presented to users. By default, - winbindd will use the traditional '\' - separator so that the unix user names look like - DOMAIN\username. In some cases this separator character may - cause problems as the '\' character has special meaning in - unix shells. In that case you can use the winbind separator - option to specify an alternative separator character. Good - alternatives may be '/' (although that conflicts - with the unix directory separator) or a '+ 'character. - The '+' character appears to be the best choice for 100% - compatibility with existing unix utilities, but may be an - aesthetically bad choice depending on your taste. - - Default: winbind separator = \ - - Example: winbind separator = + - - - - - winbind uid - The winbind uid parameter specifies the - range of user ids that are allocated by the winbindd daemon. - This range of ids should have no existing local or NIS users - within it as strange conflicts can occur otherwise. - - Default: winbind uid = <empty string> - - Example: winbind uid = 10000-20000 - - - - - - winbind gid - The winbind gid parameter specifies the - range of group ids that are allocated by the winbindd daemon. - This range of group ids should have no existing local or NIS - groups within it as strange conflicts can occur otherwise. - - Default: winbind gid = <empty string> - - Example: winbind gid = 10000-20000 - - - - - - winbind cache time - This parameter specifies the number of - seconds the winbindd daemon will cache user and group information - before querying a Windows NT server again. When a item in the - cache is older than this time winbindd will ask the domain - controller for the sequence number of the server's account database. - If the sequence number has not changed then the cached item is - marked as valid for a further winbind cache time - seconds. Otherwise the item is fetched from the - server. This means that as long as the account database is not - actively changing winbindd will only have to send one sequence - number query packet every winbind cache time - seconds. - - Default: winbind cache time = 15 - - - - - winbind enum users - On large installations it may be necessary - to suppress the enumeration of users through the - setpwent(), getpwent() and - endpwent() group of system calls. If - the winbind enum users parameter is false, - calls to the getpwent system call will not - return any data. - - Warning: Turning off user enumeration - may cause some programs to behave oddly. For example, the finger - program relies on having access to the full user list when - searching for matching usernames. - - Default: winbind enum users = yes - - - - - winbind enum groups - On large installations it may be necessary - to suppress the enumeration of groups through the - setgrent(), getgrent() and - endgrent() group of system calls. If - the winbind enum groups parameter is - false, calls to the getgrent() system - call will not return any data. - - Warning: Turning off group - enumeration may cause some programs to behave oddly. - - - Default: winbind enum groups = no - - - - - - - template homedir - When filling out the user information - for a Windows NT user, the winbindd daemon - uses this parameter to fill in the home directory for that user. - If the string %D is present it is - substituted with the user's Windows NT domain name. If the - string %U is present it is substituted - with the user's Windows NT user name. - - Default: template homedir = /home/%D/%U - - - - - - template shell - When filling out the user information for - a Windows NT user, the winbindd daemon - uses this parameter to fill in the shell for that user. - - - Default: template shell = /bin/false - - - - - winbind use default domain - This parameter specifies whether the winbindd - daemon should operate on users without domain component in their username. - Users without a domain component are treated as is part of the winbindd server's - own domain. While this does not benifit Windows users, it makes SSH, FTP and e-mail - function in a way much closer to the way they would in a native unix system. - - Default: winbind use default domain = <falseg> - - Example: winbind use default domain = true - - - + + + winbind separator + + winbind uid + + winbind gid + + winbind cache time + + winbind enum users + + winbind enum groups + + template homedir + + template shell + + winbind use default domain + -- cgit