winbindd

Date: Wed, 16 Jul 2003 05:42:10 +0000 Subject: Documentation Update for Beta3. (This used to be commit a88dc502cb3b6b2d905106675f50680bf22e2cfa) --- docs/htmldocs/winbindd.8.html | 29 ++++++++++++++--------------- 1 file changed, 14 insertions(+), 15 deletions(-) (limited to 'docs/htmldocs/winbindd.8.html') diff --git a/docs/htmldocs/winbindd.8.html b/docs/htmldocs/winbindd.8.html index c1a64d6a00..10759df47e 100644 --- a/docs/htmldocs/winbindd.8.html +++ b/docs/htmldocs/winbindd.8.html @@ -1,5 +1,5 @@ winbindd

Name

winbindd — Name Service Switch daemon for resolving names - from NT servers

Synopsis

winbindd [-F] [-S] [-i] [-B] [-d <debug level>] [-s <smb config file>] [-n]

DESCRIPTION

This program is part of the Samba(7) suite.

winbindd is a daemon that provides + from NT servers

Synopsis

winbindd [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]

DESCRIPTION

This program is part of the Samba(7) suite.

winbindd is a daemon that provides a service for the Name Service Switch capability that is present in most modern C libraries. The Name Service Switch allows user and system information to be obtained from different databases @@ -26,12 +26,12 @@ the passwd(5) file and used by getpwent(3) functions.

group

Group information traditionally stored in the group(5) file and used by - getgrent(3) functions.

For example, the following simple configuration in the + getgrent(3) functions.

For example, the following simple configuration in the /etc/nsswitch.conf file can be used to initially resolve user and group information from /etc/passwd and /etc/group and then from the Windows NT server. -

+ passwd:         files winbind
 group:          files winbind
 
The following simple configuration in the
@@ -88,11 +88,10 @@ never removed by the client.
 		slower. The results will however be more accurate, since 
 		results from the cache might not be up-to-date. This 
 		might also temporarily hang winbindd if the DC doesn't respond.
-		
-B
Dual daemon mode. This means winbindd will run 
-		as 2 threads. The first will answer all requests from the cache, 
-		thus making responses to clients faster. The other will 
-		update the cache for the query that the first has just responded. 
-		Advantage of this is that responses stay accurate and are faster.
+		
-Y
Single daemon mode. This means winbindd will run 
+		as a single process (the mode of operation in Samba 2.2).  Winbindd's 
+		default behavior is to launch a child process that is responsible for 
+		updating expired cache entries.
 		
NAME AND ID RESOLUTION
Users and groups on a Windows NT server are assigned 
 	a relative id (rid) which is unique for the domain when the 
 	user or group is created.  To convert the Windows NT user or group 
@@ -119,16 +118,16 @@ never removed by the client.
 		winbind enum groups

 		template homedir

 		template shell

-		winbind use default domain
EXAMPLE SETUP
To setup winbindd for user and group lookups plus 
+		winbind use default domain
EXAMPLE SETUP
To setup winbindd for user and group lookups plus 
 	authentication from a domain controller use something like the 
-	following setup. This was tested on a RedHat 6.2 Linux box. 
In /etc/nsswitch.conf put the 
+	following setup. This was tested on a RedHat 6.2 Linux box. 
In /etc/nsswitch.conf put the 
 	following:
-
+ passwd:     files winbind
 group:      files winbind
-
In /etc/pam.d/* replace the 
+
In /etc/pam.d/* replace the 
 	auth lines with something like this:
-
+ auth       required	/lib/security/pam_securetty.so
 auth       required	/lib/security/pam_nologin.so
 auth       sufficient	/lib/security/pam_winbind.so
@@ -144,9 +143,9 @@ auth       required     /lib/security/pam_pwdb.so use_first_pass shadow nullok
 	made from /lib/libnss_winbind.so to
 	/lib/libnss_winbind.so.2.  If you are using an
 	older version of glibc then the target of the link should be
-	/lib/libnss_winbind.so.1.
Finally, setup a smb.conf(5) containing directives like the 
+	/lib/libnss_winbind.so.1.
Finally, setup a smb.conf(5) containing directives like the 
 	following:
-
+ [global]
 	winbind separator = +
         winbind cache time = 10
-- 
cgit