| 1 | '\" t
|
|---|
| 2 | .\" Title: wbinfo
|
|---|
| 3 | .\" Author: [see the "AUTHOR" section]
|
|---|
| 4 | .\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
|
|---|
| 5 | .\" Date: 09/18/2013
|
|---|
| 6 | .\" Manual: User Commands
|
|---|
| 7 | .\" Source: Samba 3.6
|
|---|
| 8 | .\" Language: English
|
|---|
| 9 | .\"
|
|---|
| 10 | .TH "WBINFO" "1" "09/18/2013" "Samba 3\&.6" "User Commands"
|
|---|
| 11 | .\" -----------------------------------------------------------------
|
|---|
| 12 | .\" * Define some portability stuff
|
|---|
| 13 | .\" -----------------------------------------------------------------
|
|---|
| 14 | .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|---|
| 15 | .\" http://bugs.debian.org/507673
|
|---|
| 16 | .\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
|
|---|
| 17 | .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|---|
| 18 | .ie \n(.g .ds Aq \(aq
|
|---|
| 19 | .el .ds Aq '
|
|---|
| 20 | .\" -----------------------------------------------------------------
|
|---|
| 21 | .\" * set default formatting
|
|---|
| 22 | .\" -----------------------------------------------------------------
|
|---|
| 23 | .\" disable hyphenation
|
|---|
| 24 | .nh
|
|---|
| 25 | .\" disable justification (adjust text to left margin only)
|
|---|
| 26 | .ad l
|
|---|
| 27 | .\" -----------------------------------------------------------------
|
|---|
| 28 | .\" * MAIN CONTENT STARTS HERE *
|
|---|
| 29 | .\" -----------------------------------------------------------------
|
|---|
| 30 | .SH "NAME"
|
|---|
| 31 | wbinfo \- Query information from winbind daemon
|
|---|
| 32 | .SH "SYNOPSIS"
|
|---|
| 33 | .HP \w'\ 'u
|
|---|
| 34 | wbinfo [\-a\ user%password] [\-\-all\-domains] [\-\-allocate\-gid] [\-\-allocate\-uid] [\-c] [\-\-ccache\-save] [\-\-change\-user\-password] [\-D\ domain] [\-\-domain\ domain] [\-\-dsgetdcname\ domain] [\-g] [\-\-getdcname\ domain] [\-\-get\-auth\-user] [\-G\ gid] [\-\-gid\-info] [\-\-group\-info] [\-\-help|\-?] [\-i\ user] [\-I\ ip] [\-K\ user%password] [\-\-lanman] [\-m] [\-n\ name] [\-N\ netbios\-name] [\-\-ntlmv2] [\-\-online\-status] [\-\-own\-domain] [\-p] [\-P|\-\-ping\-dc] [\-r\ user] [\-R|\-\-lookup\-rids] [\-s\ sid] [\-\-separator] [\-\-set\-auth\-user\ user%password] [\-S\ sid] [\-\-sid\-aliases] [\-\-sid\-to\-fullname] [\-t] [\-u] [\-\-uid\-info\ uid] [\-\-usage] [\-\-user\-domgroups\ sid] [\-\-user\-sids\ sid] [\-U\ uid] [\-V] [\-\-verbose] [\-Y\ sid]
|
|---|
| 35 | .SH "DESCRIPTION"
|
|---|
| 36 | .PP
|
|---|
| 37 | This tool is part of the
|
|---|
| 38 | \fBsamba\fR(7)
|
|---|
| 39 | suite\&.
|
|---|
| 40 | .PP
|
|---|
| 41 | The
|
|---|
| 42 | wbinfo
|
|---|
| 43 | program queries and returns information created and used by the
|
|---|
| 44 | \fBwinbindd\fR(8)
|
|---|
| 45 | daemon\&.
|
|---|
| 46 | .PP
|
|---|
| 47 | The
|
|---|
| 48 | \fBwinbindd\fR(8)
|
|---|
| 49 | daemon must be configured and running for the
|
|---|
| 50 | wbinfo
|
|---|
| 51 | program to be able to return information\&.
|
|---|
| 52 | .SH "OPTIONS"
|
|---|
| 53 | .PP
|
|---|
| 54 | \-a|\-\-authenticate \fIusername%password\fR
|
|---|
| 55 | .RS 4
|
|---|
| 56 | Attempt to authenticate a user via
|
|---|
| 57 | \fBwinbindd\fR(8)\&. This checks both authentication methods and reports its results\&.
|
|---|
| 58 | .if n \{\
|
|---|
| 59 | .sp
|
|---|
| 60 | .\}
|
|---|
| 61 | .RS 4
|
|---|
| 62 | .it 1 an-trap
|
|---|
| 63 | .nr an-no-space-flag 1
|
|---|
| 64 | .nr an-break-flag 1
|
|---|
| 65 | .br
|
|---|
| 66 | .ps +1
|
|---|
| 67 | \fBNote\fR
|
|---|
| 68 | .ps -1
|
|---|
| 69 | .br
|
|---|
| 70 | Do not be tempted to use this functionality for authentication in third\-party applications\&. Instead use
|
|---|
| 71 | \fBntlm_auth\fR(1)\&.
|
|---|
| 72 | .sp .5v
|
|---|
| 73 | .RE
|
|---|
| 74 | .RE
|
|---|
| 75 | .PP
|
|---|
| 76 | \-\-allocate\-gid
|
|---|
| 77 | .RS 4
|
|---|
| 78 | Get a new GID out of idmap
|
|---|
| 79 | .RE
|
|---|
| 80 | .PP
|
|---|
| 81 | \-\-allocate\-uid
|
|---|
| 82 | .RS 4
|
|---|
| 83 | Get a new UID out of idmap
|
|---|
| 84 | .RE
|
|---|
| 85 | .PP
|
|---|
| 86 | \-\-all\-domains
|
|---|
| 87 | .RS 4
|
|---|
| 88 | List all domains (trusted and own domain)\&.
|
|---|
| 89 | .RE
|
|---|
| 90 | .PP
|
|---|
| 91 | \-c|\-\-change\-secret
|
|---|
| 92 | .RS 4
|
|---|
| 93 | Change the trust account password\&. May be used in conjunction with
|
|---|
| 94 | \fBdomain\fR
|
|---|
| 95 | in order to change interdomain trust account passwords\&.
|
|---|
| 96 | .RE
|
|---|
| 97 | .PP
|
|---|
| 98 | \-\-ccache\-save \fIusername%password\fR
|
|---|
| 99 | .RS 4
|
|---|
| 100 | Store user and password for ccache\&.
|
|---|
| 101 | .RE
|
|---|
| 102 | .PP
|
|---|
| 103 | \-\-change\-user\-password \fIusername\fR
|
|---|
| 104 | .RS 4
|
|---|
| 105 | Change the password of a user\&. The old and new password will be prompted\&.
|
|---|
| 106 | .RE
|
|---|
| 107 | .PP
|
|---|
| 108 | \-\-domain \fIname\fR
|
|---|
| 109 | .RS 4
|
|---|
| 110 | This parameter sets the domain on which any specified operations will performed\&. If special domain name \*(Aq\&.\*(Aq is used to represent the current domain to which
|
|---|
| 111 | \fBwinbindd\fR(8)
|
|---|
| 112 | belongs\&. Currently only the
|
|---|
| 113 | \fB\-u\fR, and
|
|---|
| 114 | \fB\-g\fR
|
|---|
| 115 | options honor this parameter\&.
|
|---|
| 116 | .RE
|
|---|
| 117 | .PP
|
|---|
| 118 | \-D|\-\-domain\-info \fIdomain\fR
|
|---|
| 119 | .RS 4
|
|---|
| 120 | Show most of the info we have about the specified domain\&.
|
|---|
| 121 | .RE
|
|---|
| 122 | .PP
|
|---|
| 123 | \-\-dsgetdcname \fIdomain\fR
|
|---|
| 124 | .RS 4
|
|---|
| 125 | Find a DC for a domain\&.
|
|---|
| 126 | .RE
|
|---|
| 127 | .PP
|
|---|
| 128 | \-\-gid\-info \fIgid\fR
|
|---|
| 129 | .RS 4
|
|---|
| 130 | Get group info from gid\&.
|
|---|
| 131 | .RE
|
|---|
| 132 | .PP
|
|---|
| 133 | \-\-group\-info \fIuser\fR
|
|---|
| 134 | .RS 4
|
|---|
| 135 | Get group info for user\&.
|
|---|
| 136 | .RE
|
|---|
| 137 | .PP
|
|---|
| 138 | \-g|\-\-domain\-groups
|
|---|
| 139 | .RS 4
|
|---|
| 140 | This option will list all groups available in the Windows NT domain for which the
|
|---|
| 141 | \fBsamba\fR(7)
|
|---|
| 142 | daemon is operating in\&. Groups in all trusted domains will also be listed\&. Note that this operation does not assign group ids to any groups that have not already been seen by
|
|---|
| 143 | \fBwinbindd\fR(8)\&.
|
|---|
| 144 | .RE
|
|---|
| 145 | .PP
|
|---|
| 146 | \-\-get\-auth\-user
|
|---|
| 147 | .RS 4
|
|---|
| 148 | Print username and password used by
|
|---|
| 149 | \fBwinbindd\fR(8)
|
|---|
| 150 | during session setup to a domain controller\&. Username and password can be set using
|
|---|
| 151 | \fB\-\-set\-auth\-user\fR\&. Only available for root\&.
|
|---|
| 152 | .RE
|
|---|
| 153 | .PP
|
|---|
| 154 | \-\-getdcname \fIdomain\fR
|
|---|
| 155 | .RS 4
|
|---|
| 156 | Get the DC name for the specified domain\&.
|
|---|
| 157 | .RE
|
|---|
| 158 | .PP
|
|---|
| 159 | \-G|\-\-gid\-to\-sid \fIgid\fR
|
|---|
| 160 | .RS 4
|
|---|
| 161 | Try to convert a UNIX group id to a Windows NT SID\&. If the gid specified does not refer to one within the idmap gid range then the operation will fail\&.
|
|---|
| 162 | .RE
|
|---|
| 163 | .PP
|
|---|
| 164 | \-?
|
|---|
| 165 | .RS 4
|
|---|
| 166 | Print brief help overview\&.
|
|---|
| 167 | .RE
|
|---|
| 168 | .PP
|
|---|
| 169 | \-i|\-\-user\-info \fIuser\fR
|
|---|
| 170 | .RS 4
|
|---|
| 171 | Get user info\&.
|
|---|
| 172 | .RE
|
|---|
| 173 | .PP
|
|---|
| 174 | \-I|\-\-WINS\-by\-ip \fIip\fR
|
|---|
| 175 | .RS 4
|
|---|
| 176 | The
|
|---|
| 177 | \fI\-I\fR
|
|---|
| 178 | option queries
|
|---|
| 179 | \fBwinbindd\fR(8)
|
|---|
| 180 | to send a node status request to get the NetBIOS name associated with the IP address specified by the
|
|---|
| 181 | \fIip\fR
|
|---|
| 182 | parameter\&.
|
|---|
| 183 | .RE
|
|---|
| 184 | .PP
|
|---|
| 185 | \-K|\-\-krb5auth \fIusername%password\fR
|
|---|
| 186 | .RS 4
|
|---|
| 187 | Attempt to authenticate a user via Kerberos\&.
|
|---|
| 188 | .RE
|
|---|
| 189 | .PP
|
|---|
| 190 | \-\-lanman
|
|---|
| 191 | .RS 4
|
|---|
| 192 | Use lanman cryptography for user authentication\&.
|
|---|
| 193 | .RE
|
|---|
| 194 | .PP
|
|---|
| 195 | \-m|\-\-trusted\-domains
|
|---|
| 196 | .RS 4
|
|---|
| 197 | Produce a list of domains trusted by the Windows NT server
|
|---|
| 198 | \fBwinbindd\fR(8)
|
|---|
| 199 | contacts when resolving names\&. This list does not include the Windows NT domain the server is a Primary Domain Controller for\&.
|
|---|
| 200 | .RE
|
|---|
| 201 | .PP
|
|---|
| 202 | \-n|\-\-name\-to\-sid \fIname\fR
|
|---|
| 203 | .RS 4
|
|---|
| 204 | The
|
|---|
| 205 | \fI\-n\fR
|
|---|
| 206 | option queries
|
|---|
| 207 | \fBwinbindd\fR(8)
|
|---|
| 208 | for the SID associated with the name specified\&. Domain names can be specified before the user name by using the winbind separator character\&. For example CWDOM1/Administrator refers to the Administrator user in the domain CWDOM1\&. If no domain is specified then the domain used is the one specified in the
|
|---|
| 209 | \fBsmb.conf\fR(5)
|
|---|
| 210 | \fIworkgroup \fR
|
|---|
| 211 | parameter\&.
|
|---|
| 212 | .RE
|
|---|
| 213 | .PP
|
|---|
| 214 | \-N|\-\-WINS\-by\-name \fIname\fR
|
|---|
| 215 | .RS 4
|
|---|
| 216 | The
|
|---|
| 217 | \fI\-N\fR
|
|---|
| 218 | option queries
|
|---|
| 219 | \fBwinbindd\fR(8)
|
|---|
| 220 | to query the WINS server for the IP address associated with the NetBIOS name specified by the
|
|---|
| 221 | \fIname\fR
|
|---|
| 222 | parameter\&.
|
|---|
| 223 | .RE
|
|---|
| 224 | .PP
|
|---|
| 225 | \-\-ntlmv2
|
|---|
| 226 | .RS 4
|
|---|
| 227 | Use NTLMv2 cryptography for user authentication\&.
|
|---|
| 228 | .RE
|
|---|
| 229 | .PP
|
|---|
| 230 | \-\-online\-status \fIdomain\fR
|
|---|
| 231 | .RS 4
|
|---|
| 232 | Show whether domains are marked as online or offline\&. An optional domain argument limits the output to the online status of a given domain\&.
|
|---|
| 233 | .RE
|
|---|
| 234 | .PP
|
|---|
| 235 | \-\-own\-domain
|
|---|
| 236 | .RS 4
|
|---|
| 237 | List own domain\&.
|
|---|
| 238 | .RE
|
|---|
| 239 | .PP
|
|---|
| 240 | \-p|\-\-ping
|
|---|
| 241 | .RS 4
|
|---|
| 242 | Check whether
|
|---|
| 243 | \fBwinbindd\fR(8)
|
|---|
| 244 | is still alive\&. Prints out either \*(Aqsucceeded\*(Aq or \*(Aqfailed\*(Aq\&.
|
|---|
| 245 | .RE
|
|---|
| 246 | .PP
|
|---|
| 247 | \-P|\-\-ping\-dc
|
|---|
| 248 | .RS 4
|
|---|
| 249 | Issue a no\-effect command to our DC\&. This checks if our secure channel connection to our domain controller is still alive\&. It has much less impact than wbinfo \-t\&.
|
|---|
| 250 | .RE
|
|---|
| 251 | .PP
|
|---|
| 252 | \-r|\-\-user\-groups \fIusername\fR
|
|---|
| 253 | .RS 4
|
|---|
| 254 | Try to obtain the list of UNIX group ids to which the user belongs\&. This only works for users defined on a Domain Controller\&.
|
|---|
| 255 | .RE
|
|---|
| 256 | .PP
|
|---|
| 257 | \-R|\-\-lookup\-rids \fIrid1, rid2, rid3\&.\&.\&.\fR
|
|---|
| 258 | .RS 4
|
|---|
| 259 | Converts RIDs to names\&. Uses a comma separated list of rids\&.
|
|---|
| 260 | .RE
|
|---|
| 261 | .PP
|
|---|
| 262 | \-s|\-\-sid\-to\-name \fIsid\fR
|
|---|
| 263 | .RS 4
|
|---|
| 264 | Use
|
|---|
| 265 | \fI\-s\fR
|
|---|
| 266 | to resolve a SID to a name\&. This is the inverse of the
|
|---|
| 267 | \fI\-n \fR
|
|---|
| 268 | option above\&. SIDs must be specified as ASCII strings in the traditional Microsoft format\&. For example, S\-1\-5\-21\-1455342024\-3071081365\-2475485837\-500\&.
|
|---|
| 269 | .RE
|
|---|
| 270 | .PP
|
|---|
| 271 | \-\-separator
|
|---|
| 272 | .RS 4
|
|---|
| 273 | Get the active winbind separator\&.
|
|---|
| 274 | .RE
|
|---|
| 275 | .PP
|
|---|
| 276 | \-\-set\-auth\-user \fIusername%password\fR
|
|---|
| 277 | .RS 4
|
|---|
| 278 | Store username and password used by
|
|---|
| 279 | \fBwinbindd\fR(8)
|
|---|
| 280 | during session setup to a domain controller\&. This enables winbindd to operate in a Windows 2000 domain with Restrict Anonymous turned on (a\&.k\&.a\&. Permissions compatible with Windows 2000 servers only)\&.
|
|---|
| 281 | .RE
|
|---|
| 282 | .PP
|
|---|
| 283 | \-S|\-\-sid\-to\-uid \fIsid\fR
|
|---|
| 284 | .RS 4
|
|---|
| 285 | Convert a SID to a UNIX user id\&. If the SID does not correspond to a UNIX user mapped by
|
|---|
| 286 | \fBwinbindd\fR(8)
|
|---|
| 287 | then the operation will fail\&.
|
|---|
| 288 | .RE
|
|---|
| 289 | .PP
|
|---|
| 290 | \-\-sid\-aliases \fIsid\fR
|
|---|
| 291 | .RS 4
|
|---|
| 292 | Get SID aliases for a given SID\&.
|
|---|
| 293 | .RE
|
|---|
| 294 | .PP
|
|---|
| 295 | \-\-sid\-to\-fullname \fIsid\fR
|
|---|
| 296 | .RS 4
|
|---|
| 297 | Converts a SID to a full username (DOMAIN\eusername)\&.
|
|---|
| 298 | .RE
|
|---|
| 299 | .PP
|
|---|
| 300 | \-t|\-\-check\-secret
|
|---|
| 301 | .RS 4
|
|---|
| 302 | Verify that the workstation trust account created when the Samba server is added to the Windows NT domain is working\&. May be used in conjunction with
|
|---|
| 303 | \fBdomain\fR
|
|---|
| 304 | in order to verify interdomain trust accounts\&.
|
|---|
| 305 | .RE
|
|---|
| 306 | .PP
|
|---|
| 307 | \-u|\-\-domain\-users
|
|---|
| 308 | .RS 4
|
|---|
| 309 | This option will list all users available in the Windows NT domain for which the
|
|---|
| 310 | \fBwinbindd\fR(8)
|
|---|
| 311 | daemon is operating in\&. Users in all trusted domains will also be listed\&. Note that this operation does not assign user ids to any users that have not already been seen by
|
|---|
| 312 | \fBwinbindd\fR(8)
|
|---|
| 313 | \&.
|
|---|
| 314 | .RE
|
|---|
| 315 | .PP
|
|---|
| 316 | \-\-uid\-info \fIuid\fR
|
|---|
| 317 | .RS 4
|
|---|
| 318 | Get user info for the user connected to user id UID\&.
|
|---|
| 319 | .RE
|
|---|
| 320 | .PP
|
|---|
| 321 | \-\-usage
|
|---|
| 322 | .RS 4
|
|---|
| 323 | Print brief help overview\&.
|
|---|
| 324 | .RE
|
|---|
| 325 | .PP
|
|---|
| 326 | \-\-user\-domgroups \fIsid\fR
|
|---|
| 327 | .RS 4
|
|---|
| 328 | Get user domain groups\&.
|
|---|
| 329 | .RE
|
|---|
| 330 | .PP
|
|---|
| 331 | \-\-user\-sids \fIsid\fR
|
|---|
| 332 | .RS 4
|
|---|
| 333 | Get user group SIDs for user\&.
|
|---|
| 334 | .RE
|
|---|
| 335 | .PP
|
|---|
| 336 | \-U|\-\-uid\-to\-sid \fIuid\fR
|
|---|
| 337 | .RS 4
|
|---|
| 338 | Try to convert a UNIX user id to a Windows NT SID\&. If the uid specified does not refer to one within the idmap range then the operation will fail\&.
|
|---|
| 339 | .RE
|
|---|
| 340 | .PP
|
|---|
| 341 | \-\-verbose
|
|---|
| 342 | .RS 4
|
|---|
| 343 | Print additional information about the query results\&.
|
|---|
| 344 | .RE
|
|---|
| 345 | .PP
|
|---|
| 346 | \-Y|\-\-sid\-to\-gid \fIsid\fR
|
|---|
| 347 | .RS 4
|
|---|
| 348 | Convert a SID to a UNIX group id\&. If the SID does not correspond to a UNIX group mapped by
|
|---|
| 349 | \fBwinbindd\fR(8)
|
|---|
| 350 | then the operation will fail\&.
|
|---|
| 351 | .RE
|
|---|
| 352 | .PP
|
|---|
| 353 | \-V|\-\-version
|
|---|
| 354 | .RS 4
|
|---|
| 355 | Prints the program version number\&.
|
|---|
| 356 | .RE
|
|---|
| 357 | .PP
|
|---|
| 358 | \-h|\-\-help
|
|---|
| 359 | .RS 4
|
|---|
| 360 | Print a summary of command line options\&.
|
|---|
| 361 | .RE
|
|---|
| 362 | .SH "EXIT STATUS"
|
|---|
| 363 | .PP
|
|---|
| 364 | The wbinfo program returns 0 if the operation succeeded, or 1 if the operation failed\&. If the
|
|---|
| 365 | \fBwinbindd\fR(8)
|
|---|
| 366 | daemon is not working
|
|---|
| 367 | wbinfo
|
|---|
| 368 | will always return failure\&.
|
|---|
| 369 | .SH "VERSION"
|
|---|
| 370 | .PP
|
|---|
| 371 | This man page is correct for version 3 of the Samba suite\&.
|
|---|
| 372 | .SH "SEE ALSO"
|
|---|
| 373 | .PP
|
|---|
| 374 | \fBwinbindd\fR(8)
|
|---|
| 375 | and
|
|---|
| 376 | \fBntlm_auth\fR(1)
|
|---|
| 377 | .SH "AUTHOR"
|
|---|
| 378 | .PP
|
|---|
| 379 | The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&.
|
|---|
| 380 | .PP
|
|---|
| 381 | wbinfo
|
|---|
| 382 | and
|
|---|
| 383 | winbindd
|
|---|
| 384 | were written by Tim Potter\&.
|
|---|
| 385 | .PP
|
|---|
| 386 | The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&.
|
|---|
