| 1 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>idmap_rid</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="idmap_rid.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>idmap_rid — Samba's idmap_rid Backend for Winbind</p></div><div class="refsynopsisdiv"><h2>DESCRIPTION</h2><p>The idmap_rid backend provides a way to use an algorithmic
|
|---|
| 2 | mapping scheme to map UIDs/GIDs and SIDs. No database is required
|
|---|
| 3 | in this case as the mapping is deterministic.</p></div><div class="refsect1" lang="en"><a name="id2522927"></a><h2>IDMAP OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">range = low - high</span></dt><dd><p>
|
|---|
| 4 | Defines the available matching uid and gid range for which the
|
|---|
| 5 | backend is authoritative. Note that the range acts as a filter.
|
|---|
| 6 | If algorithmically determined UID or GID fall outside the
|
|---|
| 7 | range, they are ignored and the corresponding map is discarded.
|
|---|
| 8 | It is intended as a way to avoid accidental UID/GID overlaps
|
|---|
| 9 | between local and remotely defined IDs.
|
|---|
| 10 | </p></dd><dt><span class="term">base_rid = INTEGER</span></dt><dd><p>
|
|---|
| 11 | Defines the base integer used to build SIDs out of an UID or a GID,
|
|---|
| 12 | and to rebase the UID or GID to be obtained from a SID. User RIDs
|
|---|
| 13 | by default start at 1000 (512 hexadecimal), this means a good value
|
|---|
| 14 | for base_rid can be 1000 as the resulting ID is calculated this way:
|
|---|
| 15 | ID = RID - BASE_RID + LOW RANGE ID.
|
|---|
| 16 | </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2483344"></a><h2>EXAMPLES</h2><p>This example shows how to configure 2 domains with idmap_rid</p><pre class="programlisting">
|
|---|
| 17 | [global]
|
|---|
| 18 | idmap domains = MAIN TRUSTED1
|
|---|
| 19 |
|
|---|
| 20 | idmap config MAIN:backend = rid
|
|---|
| 21 | idmap config MAIN:base_rid = 0
|
|---|
| 22 | idmap config MAIN:range = 10000 - 49999
|
|---|
| 23 |
|
|---|
| 24 | idmap config TRUSTED1:backend = rid
|
|---|
| 25 | idmap config TRUSTED1:base_rid = 1000
|
|---|
| 26 | idmap config TRUSTED1:range = 50000 - 99999
|
|---|
| 27 | </pre></div><div class="refsect1" lang="en"><a name="id2483365"></a><h2>AUTHOR</h2><p>
|
|---|
| 28 | The original Samba software and related utilities
|
|---|
| 29 | were created by Andrew Tridgell. Samba is now developed
|
|---|
| 30 | by the Samba Team as an Open Source project similar
|
|---|
| 31 | to the way the Linux kernel is developed.
|
|---|
| 32 | </p></div></div></body></html>
|
|---|
