1 | <?xml version="1.0" encoding="iso-8859-1"?>
|
---|
2 | <!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
|
---|
3 | <refentry id="idmap_rid.8">
|
---|
4 |
|
---|
5 | <refmeta>
|
---|
6 | <refentrytitle>idmap_rid</refentrytitle>
|
---|
7 | <manvolnum>8</manvolnum>
|
---|
8 | <refmiscinfo class="source">Samba</refmiscinfo>
|
---|
9 | <refmiscinfo class="manual">System Administration tools</refmiscinfo>
|
---|
10 | <refmiscinfo class="version">3.3</refmiscinfo>
|
---|
11 | </refmeta>
|
---|
12 |
|
---|
13 |
|
---|
14 | <refnamediv>
|
---|
15 | <refname>idmap_rid</refname>
|
---|
16 | <refpurpose>Samba's idmap_rid Backend for Winbind</refpurpose>
|
---|
17 | </refnamediv>
|
---|
18 |
|
---|
19 | <refsynopsisdiv>
|
---|
20 | <title>DESCRIPTION</title>
|
---|
21 | <para>The idmap_rid backend provides a way to use an algorithmic
|
---|
22 | mapping scheme to map UIDs/GIDs and SIDs. No database is required
|
---|
23 | in this case as the mapping is deterministic.</para>
|
---|
24 | </refsynopsisdiv>
|
---|
25 |
|
---|
26 | <refsect1>
|
---|
27 | <title>IDMAP OPTIONS</title>
|
---|
28 |
|
---|
29 | <variablelist>
|
---|
30 | <varlistentry>
|
---|
31 | <term>range = low - high</term>
|
---|
32 | <listitem><para>
|
---|
33 | Defines the available matching uid and gid range for which the
|
---|
34 | backend is authoritative. Note that the range acts as a filter.
|
---|
35 | If algorithmically determined UID or GID fall outside the
|
---|
36 | range, they are ignored and the corresponding map is discarded.
|
---|
37 | It is intended as a way to avoid accidental UID/GID overlaps
|
---|
38 | between local and remotely defined IDs.
|
---|
39 | </para></listitem>
|
---|
40 | </varlistentry>
|
---|
41 |
|
---|
42 | <varlistentry>
|
---|
43 | <term>base_rid = INTEGER</term>
|
---|
44 | <listitem><para>
|
---|
45 | Defines the base integer used to build SIDs out of an UID or a GID,
|
---|
46 | and to rebase the UID or GID to be obtained from a SID. User RIDs
|
---|
47 | by default start at 1000 (512 hexadecimal), this means a good value
|
---|
48 | for base_rid can be 1000 as the resulting ID is calculated this way:
|
---|
49 | ID = RID - BASE_RID + LOW RANGE ID.
|
---|
50 | </para>
|
---|
51 | <para>
|
---|
52 | Use of this parameter is deprecated.
|
---|
53 | </para></listitem>
|
---|
54 | </varlistentry>
|
---|
55 | </variablelist>
|
---|
56 | </refsect1>
|
---|
57 |
|
---|
58 | <refsect1>
|
---|
59 | <title>EXAMPLES</title>
|
---|
60 | <para>This example shows how to configure a domain with idmap_rid</para>
|
---|
61 |
|
---|
62 | <programlisting>
|
---|
63 | [global]
|
---|
64 | idmap backend = tdb
|
---|
65 | idmap uid = 1000000-1999999
|
---|
66 | idmap gid = 1000000-1999999
|
---|
67 |
|
---|
68 | idmap config TRUSTED : backend = rid
|
---|
69 | idmap config TRUSTED : range = 50000 - 99999
|
---|
70 | </programlisting>
|
---|
71 | </refsect1>
|
---|
72 |
|
---|
73 | <refsect1>
|
---|
74 | <title>AUTHOR</title>
|
---|
75 |
|
---|
76 | <para>
|
---|
77 | The original Samba software and related utilities
|
---|
78 | were created by Andrew Tridgell. Samba is now developed
|
---|
79 | by the Samba Team as an Open Source project similar
|
---|
80 | to the way the Linux kernel is developed.
|
---|
81 | </para>
|
---|
82 | </refsect1>
|
---|
83 |
|
---|
84 | </refentry>
|
---|