| 1 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>wbinfo</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="wbinfo"><a name="wbinfo.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>wbinfo — Query information from winbind daemon</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">wbinfo</code> [-a user%password] [--all-domains] [--allocate-gid] [--allocate-uid] [-c] [--ccache-save] [--change-user-password] [-D domain] [--domain domain] [--dsgetdcname domain] [-g] [--getdcname domain] [--get-auth-user] [-G gid] [--gid-info] [--group-info] [--help|-?] [-i user] [-I ip] [-K user%password] [--lanman] [-m] [-n name] [-N netbios-name] [--ntlmv2] [--online-status] [--own-domain] [-p] [-P|--ping-dc] [-r user] [-R|--lookup-rids] [-s sid] [--separator] [--set-auth-user user%password] [-S sid] [--sid-aliases] [--sid-to-fullname] [-t] [-u] [--uid-info uid] [--usage] [--user-domgroups sid] [--user-sids sid] [-U uid] [-V] [--verbose] [-Y sid]</p></div></div><div class="refsect1" title="DESCRIPTION"><a name="id265981"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">wbinfo</code> program queries and returns information
|
|---|
| 2 | created and used by the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon. </p><p>The <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon must be configured
|
|---|
| 3 | and running for the <code class="literal">wbinfo</code> program to be able
|
|---|
| 4 | to return information.</p></div><div class="refsect1" title="OPTIONS"><a name="id307086"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-a|--authenticate <em class="replaceable"><code>username%password</code></em></span></dt><dd><p>Attempt to authenticate a user via <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>.
|
|---|
| 5 | This checks both authentication methods and reports its results.
|
|---|
| 6 | </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Do not be tempted to use this
|
|---|
| 7 | functionality for authentication in third-party
|
|---|
| 8 | applications. Instead use <a class="citerefentry" href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a>.</p></div></dd><dt><span class="term">--allocate-gid</span></dt><dd><p>Get a new GID out of idmap
|
|---|
| 9 | </p></dd><dt><span class="term">--allocate-uid</span></dt><dd><p>Get a new UID out of idmap
|
|---|
| 10 | </p></dd><dt><span class="term">--all-domains</span></dt><dd><p>List all domains (trusted and
|
|---|
| 11 | own domain).
|
|---|
| 12 | </p></dd><dt><span class="term">-c|--change-secret</span></dt><dd><p>Change the trust account password. May be used
|
|---|
| 13 | in conjunction with <code class="option">domain</code> in order to change
|
|---|
| 14 | interdomain trust account passwords.
|
|---|
| 15 | </p></dd><dt><span class="term">--ccache-save <em class="replaceable"><code>username%password</code></em></span></dt><dd><p>Store user and password for ccache.
|
|---|
| 16 | </p></dd><dt><span class="term">--change-user-password <em class="replaceable"><code>username</code></em></span></dt><dd><p>Change the password of a user. The old and new password will be prompted.
|
|---|
| 17 | </p></dd><dt><span class="term">--domain <em class="replaceable"><code>name</code></em></span></dt><dd><p>This parameter sets the domain on which any specified
|
|---|
| 18 | operations will performed. If special domain name '.' is used to represent
|
|---|
| 19 | the current domain to which <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> belongs. Currently only the
|
|---|
| 20 | <code class="option">-u</code>, and <code class="option">-g</code> options honor this parameter.
|
|---|
| 21 | </p></dd><dt><span class="term">-D|--domain-info <em class="replaceable"><code>domain</code></em></span></dt><dd><p>Show most of the info we have about the
|
|---|
| 22 | specified domain.
|
|---|
| 23 | </p></dd><dt><span class="term">--dsgetdcname <em class="replaceable"><code>domain</code></em></span></dt><dd><p>Find a DC for a domain.
|
|---|
| 24 | </p></dd><dt><span class="term">--gid-info <em class="replaceable"><code>gid</code></em></span></dt><dd><p>Get group info from gid.
|
|---|
| 25 | </p></dd><dt><span class="term">--group-info <em class="replaceable"><code>user</code></em></span></dt><dd><p>Get group info for user.
|
|---|
| 26 | </p></dd><dt><span class="term">-g|--domain-groups</span></dt><dd><p>This option will list all groups available
|
|---|
| 27 | in the Windows NT domain for which the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> daemon is operating in. Groups in all trusted domains
|
|---|
| 28 | will also be listed. Note that this operation does not assign
|
|---|
| 29 | group ids to any groups that have not already been
|
|---|
| 30 | seen by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>. </p></dd><dt><span class="term">--get-auth-user</span></dt><dd><p>Print username and password used by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>
|
|---|
| 31 | during session setup to a domain controller. Username
|
|---|
| 32 | and password can be set using <code class="option">--set-auth-user</code>.
|
|---|
| 33 | Only available for root.</p></dd><dt><span class="term">--getdcname <em class="replaceable"><code>domain</code></em></span></dt><dd><p>Get the DC name for the specified domain.
|
|---|
| 34 | </p></dd><dt><span class="term">-G|--gid-to-sid <em class="replaceable"><code>gid</code></em></span></dt><dd><p>Try to convert a UNIX group id to a Windows
|
|---|
| 35 | NT SID. If the gid specified does not refer to one within
|
|---|
| 36 | the idmap gid range then the operation will fail. </p></dd><dt><span class="term">-?</span></dt><dd><p>Print brief help overview.
|
|---|
| 37 | </p></dd><dt><span class="term">-i|--user-info <em class="replaceable"><code>user</code></em></span></dt><dd><p>Get user info.
|
|---|
| 38 | </p></dd><dt><span class="term">-I|--WINS-by-ip <em class="replaceable"><code>ip</code></em></span></dt><dd><p>The <em class="parameter"><code>-I</code></em> option
|
|---|
| 39 | queries <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to send a node status
|
|---|
| 40 | request to get the NetBIOS name associated with the IP address
|
|---|
| 41 | specified by the <em class="parameter"><code>ip</code></em> parameter.
|
|---|
| 42 | </p></dd><dt><span class="term">-K|--krb5auth <em class="replaceable"><code>username%password</code></em></span></dt><dd><p>Attempt to authenticate a user via Kerberos.
|
|---|
| 43 | </p></dd><dt><span class="term">--lanman</span></dt><dd><p>Use lanman cryptography for user authentication.
|
|---|
| 44 | </p></dd><dt><span class="term">-m|--trusted-domains</span></dt><dd><p>Produce a list of domains trusted by the
|
|---|
| 45 | Windows NT server <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> contacts
|
|---|
| 46 | when resolving names. This list does not include the Windows
|
|---|
| 47 | NT domain the server is a Primary Domain Controller for.
|
|---|
| 48 | </p></dd><dt><span class="term">-n|--name-to-sid <em class="replaceable"><code>name</code></em></span></dt><dd><p>The <em class="parameter"><code>-n</code></em> option
|
|---|
| 49 | queries <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> for the SID
|
|---|
| 50 | associated with the name specified. Domain names can be specified
|
|---|
| 51 | before the user name by using the winbind separator character.
|
|---|
| 52 | For example CWDOM1/Administrator refers to the Administrator
|
|---|
| 53 | user in the domain CWDOM1. If no domain is specified then the
|
|---|
| 54 | domain used is the one specified in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> <em class="parameter"><code>workgroup
|
|---|
| 55 | </code></em> parameter. </p></dd><dt><span class="term">-N|--WINS-by-name <em class="replaceable"><code>name</code></em></span></dt><dd><p>The <em class="parameter"><code>-N</code></em> option
|
|---|
| 56 | queries <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to query the WINS
|
|---|
| 57 | server for the IP address associated with the NetBIOS name
|
|---|
| 58 | specified by the <em class="parameter"><code>name</code></em> parameter.
|
|---|
| 59 | </p></dd><dt><span class="term">--ntlmv2</span></dt><dd><p>Use NTLMv2 cryptography for user authentication.
|
|---|
| 60 | </p></dd><dt><span class="term">--online-status <em class="replaceable"><code>domain</code></em></span></dt><dd><p>Show whether domains are marked as online or
|
|---|
| 61 | offline. An optional domain argument limits the
|
|---|
| 62 | output to the online status of a given domain.
|
|---|
| 63 | </p></dd><dt><span class="term">--own-domain</span></dt><dd><p>List own domain.
|
|---|
| 64 | </p></dd><dt><span class="term">-p|--ping</span></dt><dd><p>Check whether <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> is still alive.
|
|---|
| 65 | Prints out either 'succeeded' or 'failed'.
|
|---|
| 66 | </p></dd><dt><span class="term">-P|--ping-dc</span></dt><dd><p>Issue a no-effect command to our DC. This
|
|---|
| 67 | checks if our secure channel connection to our domain
|
|---|
| 68 | controller is still alive. It has much less impact than
|
|---|
| 69 | wbinfo -t.
|
|---|
| 70 | </p></dd><dt><span class="term">-r|--user-groups <em class="replaceable"><code>username</code></em></span></dt><dd><p>Try to obtain the list of UNIX group ids
|
|---|
| 71 | to which the user belongs. This only works for users
|
|---|
| 72 | defined on a Domain Controller.
|
|---|
| 73 | </p></dd><dt><span class="term">-R|--lookup-rids <em class="replaceable"><code>rid1, rid2, rid3...</code></em></span></dt><dd><p>Converts RIDs to names. Uses a comma separated
|
|---|
| 74 | list of rids.
|
|---|
| 75 | </p></dd><dt><span class="term">-s|--sid-to-name <em class="replaceable"><code>sid</code></em></span></dt><dd><p>Use <em class="parameter"><code>-s</code></em> to resolve
|
|---|
| 76 | a SID to a name. This is the inverse of the <em class="parameter"><code>-n
|
|---|
| 77 | </code></em> option above. SIDs must be specified as ASCII strings
|
|---|
| 78 | in the traditional Microsoft format. For example,
|
|---|
| 79 | S-1-5-21-1455342024-3071081365-2475485837-500. </p></dd><dt><span class="term">--separator</span></dt><dd><p>Get the active winbind separator.
|
|---|
| 80 | </p></dd><dt><span class="term">--set-auth-user <em class="replaceable"><code>username%password</code></em></span></dt><dd><p>Store username and password used by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> during session setup to a domain controller. This enables
|
|---|
| 81 | winbindd to operate in a Windows 2000 domain with Restrict
|
|---|
| 82 | Anonymous turned on (a.k.a. Permissions compatible with
|
|---|
| 83 | Windows 2000 servers only).
|
|---|
| 84 | </p></dd><dt><span class="term">-S|--sid-to-uid <em class="replaceable"><code>sid</code></em></span></dt><dd><p>Convert a SID to a UNIX user id. If the SID
|
|---|
| 85 | does not correspond to a UNIX user mapped by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then the operation will fail. </p></dd><dt><span class="term">--sid-aliases <em class="replaceable"><code>sid</code></em></span></dt><dd><p>Get SID aliases for a given SID.
|
|---|
| 86 | </p></dd><dt><span class="term">--sid-to-fullname <em class="replaceable"><code>sid</code></em></span></dt><dd><p>Converts a SID to a full username
|
|---|
| 87 | (DOMAIN\username).
|
|---|
| 88 | </p></dd><dt><span class="term">-t|--check-secret</span></dt><dd><p>Verify that the workstation trust account
|
|---|
| 89 | created when the Samba server is added to the Windows NT
|
|---|
| 90 | domain is working. May be used in conjunction with
|
|---|
| 91 | <code class="option">domain</code> in order to verify interdomain
|
|---|
| 92 | trust accounts.</p></dd><dt><span class="term">-u|--domain-users</span></dt><dd><p>This option will list all users available
|
|---|
| 93 | in the Windows NT domain for which the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is operating in. Users in all trusted domains
|
|---|
| 94 | will also be listed. Note that this operation does not assign
|
|---|
| 95 | user ids to any users that have not already been seen by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>
|
|---|
| 96 | .</p></dd><dt><span class="term">--uid-info <em class="replaceable"><code>uid</code></em></span></dt><dd><p>Get user info for the user connected to
|
|---|
| 97 | user id UID.</p></dd><dt><span class="term">--usage</span></dt><dd><p>Print brief help overview.
|
|---|
| 98 | </p></dd><dt><span class="term">--user-domgroups <em class="replaceable"><code>sid</code></em></span></dt><dd><p>Get user domain groups.
|
|---|
| 99 | </p></dd><dt><span class="term">--user-sids <em class="replaceable"><code>sid</code></em></span></dt><dd><p>Get user group SIDs for user.
|
|---|
| 100 | </p></dd><dt><span class="term">-U|--uid-to-sid <em class="replaceable"><code>uid</code></em></span></dt><dd><p>Try to convert a UNIX user id to a Windows NT
|
|---|
| 101 | SID. If the uid specified does not refer to one within
|
|---|
| 102 | the idmap range then the operation will fail. </p></dd><dt><span class="term">--verbose</span></dt><dd><p>
|
|---|
| 103 | Print additional information about the query results.
|
|---|
| 104 | </p></dd><dt><span class="term">-Y|--sid-to-gid <em class="replaceable"><code>sid</code></em></span></dt><dd><p>Convert a SID to a UNIX group id. If the SID
|
|---|
| 105 | does not correspond to a UNIX group mapped by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then
|
|---|
| 106 | the operation will fail. </p></dd><dt><span class="term">-V|--version</span></dt><dd><p>Prints the program version number.
|
|---|
| 107 | </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
|
|---|
| 108 | </p></dd></dl></div></div><div class="refsect1" title="EXIT STATUS"><a name="id307884"></a><h2>EXIT STATUS</h2><p>The wbinfo program returns 0 if the operation
|
|---|
| 109 | succeeded, or 1 if the operation failed. If the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is not working <code class="literal">wbinfo</code> will always return
|
|---|
| 110 | failure. </p></div><div class="refsect1" title="VERSION"><a name="id307908"></a><h2>VERSION</h2><p>This man page is correct for version 3 of
|
|---|
| 111 | the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id307918"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> and <a class="citerefentry" href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a></p></div><div class="refsect1" title="AUTHOR"><a name="id307941"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
|
|---|
| 112 | were created by Andrew Tridgell. Samba is now developed
|
|---|
| 113 | by the Samba Team as an Open Source project similar
|
|---|
| 114 | to the way the Linux kernel is developed.</p><p><code class="literal">wbinfo</code> and <code class="literal">winbindd</code>
|
|---|
| 115 | were written by Tim Potter.</p><p>The conversion to DocBook for Samba 2.2 was done
|
|---|
| 116 | by Gerald Carter. The conversion to DocBook XML 4.2 for Samba
|
|---|
| 117 | 3.0 was done by Alexander Bokovoy.</p></div></div></body></html>
|
|---|
