summaryrefslogtreecommitdiff
path: root/docs/manpages-3/idmap_nss.8.xml
blob: 2882351c084a20530291377477b15a19451ff8b8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
<refentry id="idmap_nss.8">

<refmeta>
	<refentrytitle>idmap_nss</refentrytitle>
	<manvolnum>8</manvolnum>
</refmeta>


<refnamediv>
	<refname>idmap_nss</refname>
	<refpurpose>Samba's idmap_nss Backend for Winbind</refpurpose>
</refnamediv>

<refsynopsisdiv>
	<title>DESCRIPTION</title>

	<para>The idmap_nss plugin provides a means to map Unix users and groups
	to Windows accounts and obseletes the &quot;winbind trusted domains only&quot;
	smb.conf option.  This provides a simple means of ensuring that the SID
	for a Unix user named jsmith is reported as the one assigned to 
	DOMAIN\jsmith which is necessary for reporting ACLs on files and printers
	stored on a Samba member server.
	</para>
</refsynopsisdiv>

<refsect1>
	<title>EXAMPLES</title>

	<para>
	The follow sets of a LDAP configuration which uses a slave server
	running on localhost for fetching SID/gid/uid mappings while
	sending update requests to the directory master server.
	</para>

	<programlisting>
	[global]
	    idmap domain = SAMBA TRUSTEDDOMAINS

	    idmap config SAMBA:backend  = nss
	    idmap config SAMBA:readonly = yes

	    idmap config TRUSTEDDOMAINS:default = yes
	    idmap config TRUSTEDDOMAINS:backend = tdb
	    idmap config TRUSTEDDOMAINS:range   = 10000 - 50000

	    idmap alloc backend      = tdb
	    idmap alloc config:range = 10000 - 50000
	</programlisting>
</refsect1>

<refsect1>
	<title>AUTHOR</title>

	<para>
	The original Samba software and related utilities 
	were created by Andrew Tridgell. Samba is now developed
	by the Samba Team as an Open Source project similar 
	to the way the Linux kernel is developed.
	</para>	
</refsect1>

</refentry>