From 3469866334d06d089cc334e0d610577a001e33de Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Fri, 11 Jan 2002 00:41:27 +0000 Subject: commit some changes for ab, and keep working on the smbgroupedit manpage. (This used to be commit a10cdbfbed4e04609f511cbbf976df4b4d391729) --- docs/htmldocs/smbgroupedit.8.html | 325 +++++++++++++++++++++++++++++++++++--- docs/htmldocs/wbinfo.1.html | 30 +++- 2 files changed, 322 insertions(+), 33 deletions(-) (limited to 'docs/htmldocs') diff --git a/docs/htmldocs/smbgroupedit.8.html b/docs/htmldocs/smbgroupedit.8.html index 616067273a..4af49672ca 100644 --- a/docs/htmldocs/smbgroupedit.8.html +++ b/docs/htmldocs/smbgroupedit.8.html @@ -24,7 +24,7 @@ NAME="AEN5" >

Name

smbgroupedit -- Tool for mapping UNIX groups to Windows groupssmbgroupedit -- Query/set/change UNIX - Windows NT group mapping
smbroupedit [-v]

[-v [l|s]] [-a UNIX-groupname [-d NT-groupname|-p prividge|]

DESCRIPTION

This program is part of the Samba suite.

This program is part of the Samba +suite.

The smbgroupedit command allows for mapping unix groups +to NT Builtin, Domain, or Local groups. Also +allows setting privileges for that group, such as saAddUser, +etc.

OPTIONS

-v
-v[l|s]

Print the current set of UNIX to Windows - group mappings. +>This option will list all groups available + in the Windows NT domain in which samba is operating.

-l

give a long listing, of the format:

"NT Group Name"
+    SID            :
+    Unix group     :
+    Group type     :
+    Comment        :
+    Privilege      :

For examples,

Users
+    SID : S-1-5-32-545
+    Unix group: -1
+    Group type: Local group
+    Comment :
+    Privilege : No privilege

-s

display a short listing of the format:

NTGroupName(SID) -> UnixGroupName

For example,

Users (S-1-5-32-545) -> -1

FILES

EXIT STATUS

smbgroupedit returns a status of 0 if the +operation completed successfully, and a value of 1 in the event +of a failure.

EXAMPLES

To make a subset of your samba PDC users members of +the 'Domain Admins' Global group:

  1. create a unix group (usually in + /etc/group), let's call it domadm. +

  2. add to this group the users that you want to be + domain administrators. For example if you want joe, john and mary, + your entry in /etc/group will look like: +

    domadm:x:502:joe,john,mary

  3. map this domadm group to the 'domain admins' group: +

    1. Get the SID for the Windows NT "Domain Admins" + group:

      root# smbgroupedit -vs | grep "Domain Admins"
+Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1

    2. map the unix domadm group to the Windows NT + "Domain Admins" group, by running the command: + 

      root# smbgroupedit \
+-c S-1-5-21-1108995562-3116817432-1375597819-512 \
+-u domadm

      warning: don't copy and paste this sample, the + Domain Admins SID (the S-1-5-21-...-512) is different for every PDC. +

To verify that you mapping has taken effect:

root# smbgroupedit -vs|grep "Domain Admins"
+Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm

To give access to a certain directory on a domain member machine (an +NT/W2K or a samba server running winbind) to some users who are member +of a group on your samba PDC, flag that group as a domain group:

root# smbgroupedit -a unixgroup -td

VERSION

This man page is incomplete for version 3.0 of - the Samba suite.

This man page is correct for the 3.0alpha releases of +the Samba suite.

SEE ALSO

samba(7) -

smb.conf(5)

AUTHOR

The original Samba software and related utilities - were created by Andrew Tridgell. Samba is now developed - by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

The original Samba software and related utilities +were created by Andrew Tridgell. Samba is now developed +by the Samba Team as an Open Source project similar +to the way the Linux kernel is developed.

The original Samba man pages were written by Karl Auer. - The current set of manpages and documentation is maintained - by the Samba Team in the same fashion as the Samba source code.

smbgroupedit was written by Jean Francois Micouleau. +The current set of manpages and documentation is maintained +by the Samba Team in the same fashion as the Samba source code.

wbinfo [-u] [-g] [-n name] [-s sid] [-U uid] [-G gid] [-S sid] [-Y sid] [-t] [-m]

[-u] [-g] [-n name] [-s sid] [-U uid] [-G gid] [-S sid] [-Y sid] [-t] [-m] [-a user%password] [-p]

DESCRIPTION

OPTIONS

-a username%password

Attempt to authenticate a user via winbindd. + This checks both authenticaion methods and reports its results. +

-p

Attempt a simple 'ping' check that the winbindd + is indeed alive. +

EXIT STATUS

VERSION

SEE ALSO

AUTHOR