Date: Sat, 26 Apr 2003 17:22:13 +0000 Subject: removing smbgroupedit manpage (This used to be commit 4a0c02d133af6ea6f1009b81067974d6ad4fb404) --- docs/htmldocs/smbgroupedit.8.html | 331 -------------------------------------- 1 file changed, 331 deletions(-) delete mode 100644 docs/htmldocs/smbgroupedit.8.html (limited to 'docs/htmldocs') diff --git a/docs/htmldocs/smbgroupedit.8.html b/docs/htmldocs/smbgroupedit.8.html deleted file mode 100644 index 32e00315b4..0000000000 --- a/docs/htmldocs/smbgroupedit.8.html +++ /dev/null @@ -1,331 +0,0 @@ - -smbgroupedit

smbgroupedit

Name

smbgroupedit -- Query/set/change UNIX - Windows NT group mapping

Synopsis

smbroupedit [-v [l|s]] [-a UNIX-groupname [-d NT-groupname|-p privilege|]]

DESCRIPTION

This program is part of the Samba(7) suite.

The smbgroupedit command allows for mapping unix groups -to NT Builtin, Domain, or Local groups. Also -allows setting privileges for that group, such as saAddUser, -etc.

OPTIONS

-v[l|s]

This option will list all groups available - in the Windows NT domain in which samba is operating. -

-l

give a long listing, of the format:

"NT Group Name"
-    SID            :
-    Unix group     :
-    Group type     :
-    Comment        :
-    Privilege      :

For example: -

Users
-    SID       : S-1-5-32-545
-    Unix group: -1
-    Group type: Local group
-    Comment   :
-    Privilege : No privilege

-s

display a short listing of the format:

NTGroupName(SID) -> UnixGroupName

For example: -

Users (S-1-5-32-545) -> -1

FILES

EXIT STATUS

smbgroupedit returns a status of 0 if the -operation completed successfully, and a value of 1 in the event -of a failure.

EXAMPLES

To make a subset of your samba PDC users members of -the 'Domain Admins' Global group:

create a unix group (usually in - /etc/group), let's call it domadm. -
add to this group the users that you want to be - domain administrators. For example if you want joe, john and mary, - your entry in /etc/group will look like: -
domadm:x:502:joe,john,mary
map this domadm group to the 'domain admins' group:
1. Get the SID for the Windows NT "Domain Admins" group:
```
root# smbgroupedit -vs | grep "Domain Admins"
-Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1
```
2. map the unix domadm group to the Windows NT - "Domain Admins" group, by running the command: -
```
root# smbgroupedit \
--c S-1-5-21-1108995562-3116817432-1375597819-512 \
--u domadm -td
```
  warning: don't copy and paste this sample, the - Domain Admins SID (the S-1-5-21-...-512) is different for every PDC. -

To verify that your mapping has taken effect: -

root# smbgroupedit -vs|grep "Domain Admins"
-Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm

To give access to a certain directory on a domain member machine (an -NT/W2K or a samba server running winbind) to some users who are member -of a group on your samba PDC, flag that group as a domain group: -

root# smbgroupedit -a unixgroup -td

VERSION

This man page is correct for the 3.0alpha releases of -the Samba suite.

AUTHOR

The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed.

smbgroupedit was written by Jean Francois Micouleau. -The current set of manpages and documentation is maintained -by the Samba Team in the same fashion as the Samba source code. The conversion -to DocBook XML 4.2 for Samba 3.0 was done by Alexander Bokovoy.

\ No newline at end of file -- cgit