From 55abd936a838a4410899db76cb5530b0c4694dc9 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Wed, 10 Oct 2001 17:19:10 +0000 Subject: mega-merge from 2.2 (This used to be commit c76bf8ed3275e217d1b691879153fe9137bcbe38) --- docs/docbook/manpages/winbindd.8.sgml | 53 ++++++++++++++++------------------- 1 file changed, 24 insertions(+), 29 deletions(-) (limited to 'docs/docbook/manpages/winbindd.8.sgml') diff --git a/docs/docbook/manpages/winbindd.8.sgml b/docs/docbook/manpages/winbindd.8.sgml index ed4e72604d..6a1ecd59fd 100644 --- a/docs/docbook/manpages/winbindd.8.sgml +++ b/docs/docbook/manpages/winbindd.8.sgml @@ -25,9 +25,8 @@ DESCRIPTION - This tool is part of the - Samba suite version 3.0 and describes functionality not - yet implemented in the main version of Samba. + This program is part of the + Samba suite. winbindd is a daemon that provides a service for the Name Service Switch capability that is present @@ -39,7 +38,7 @@ of user and group ids specified by the administrator of the Samba system. - The service provided by winbindd is called `winbind' and + The service provided by winbindd is called `winbind' and can be used to resolve user and group information from a Windows NT server. The service can also provide authentication services via an associated PAM module. @@ -144,7 +143,7 @@ group: files winbind DOMAIN\username. In some cases this separator character may cause problems as the '\' character has special meaning in unix shells. In that case you can use the winbind separator - option to specify an alternative sepataror character. Good + option to specify an alternative separator character. Good alternatives may be '/' (although that conflicts with the unix directory separator) or a '+ 'character. The '+' character appears to be the best choice for 100% @@ -161,7 +160,7 @@ group: files winbind winbind uid The winbind uid parameter specifies the range of user ids that are allocated by the winbindd daemon. - This range of ids should have no existing local or nis users + This range of ids should have no existing local or NIS users within it as strange conflicts can occur otherwise. Default: winbind uid = <empty string> @@ -175,7 +174,7 @@ group: files winbind winbind gid The winbind gid parameter specifies the range of group ids that are allocated by the winbindd daemon. - This range of group ids should have no existing local or nis + This range of group ids should have no existing local or NIS groups within it as strange conflicts can occur otherwise. Default: winbind gid = <empty string> @@ -191,7 +190,7 @@ group: files winbind seconds the winbindd daemon will cache user and group information before querying a Windows NT server again. When a item in the cache is older than this time winbindd will ask the domain - controller for the sequence number of the servers account database. + controller for the sequence number of the server's account database. If the sequence number has not changed then the cached item is marked as valid for a further winbind cache time seconds. Otherwise the item is fetched from the @@ -215,7 +214,7 @@ group: files winbind return any data. Warning: Turning off user enumeration - may cause some programs to behave oddly. For example, the finger + may cause some programs to behave oddly. For example, the finger program relies on having access to the full user list when searching for matching usernames. @@ -308,18 +307,15 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok The next step is to join the domain. To do that use the - samedit program like this: + smbpasswd program like this: - samedit -S '*' -W DOMAIN -UAdministrator + smbpasswd -j DOMAIN -r PDC -U + Administrator - The username after the -U can be any Domain - user that has administrator priviliges on the machine. Next from - within samedit, run the command: - - createuser MACHINE$ -j DOMAIN -L - - This assumes your domain is called "DOMAIN" and your Samba - workstation is called "MACHINE". + The username after the -U can be any + Domain user that has administrator privileges on the machine. + Substitute your domain name for "DOMAIN" and the name of your PDC + for "PDC". Next copy libnss_winbind.so to /lib and pam_winbind.so @@ -329,7 +325,7 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok older version of glibc then the target of the link should be /lib/libnss_winbind.so.1. - Finally, setup a smb.conf containing directives like the + Finally, setup a smb.conf containing directives like the following: @@ -356,7 +352,7 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok - Notes + NOTES The following notes are useful when configuring and running winbindd: @@ -369,8 +365,8 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok servers, it must be sent a SIGHUP signal. Client processes resolving names through the winbindd - nsswitch module read an environment variable named - $WINBINDD_DOMAIN. If this variable contains a comma separated + nsswitch module read an environment variable named + $WINBINDD_DOMAIN. If this variable contains a comma separated list of Windows NT domain names, then winbindd will only resolve users and groups within those Windows NT domains. @@ -389,7 +385,7 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok - Signals + SIGNALS The following signals can be used to manipulate the winbindd daemon. @@ -418,7 +414,7 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok - Files + FILES @@ -447,7 +443,7 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok $LOCKDIR/winbindd_idmap.tdb Storage for the Windows NT rid to UNIX user/group id mapping. The lock directory is specified when Samba is initially - compiled using the --with-lockdir option. + compiled using the --with-lockdir option. This directory is by default /usr/local/samba/var/locks . @@ -464,9 +460,8 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok VERSION - This man page is correct for version 2.2 of - the Samba suite. winbindd is however not available in - stable release of Samba as of yet. + This man page is correct for version 2.2 of + the Samba suite. -- cgit