|
Last change
on this file was 988, checked in by Silvan Scherrer, 9 years ago |
|
Samba Server: update vendor to version 4.4.3
|
|
File size:
1.6 KB
|
| Line | |
|---|
| 1 | <samba:parameter name="ldapsam:trusted"
|
|---|
| 2 | context="G"
|
|---|
| 3 | type="string"
|
|---|
| 4 | xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
|
|---|
| 5 | <description>
|
|---|
| 6 |
|
|---|
| 7 | <para>
|
|---|
| 8 | By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to
|
|---|
| 9 | access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group
|
|---|
| 10 | this inevitably leads to inefficiencies. One important question a user needs to know is the list of groups he
|
|---|
| 11 | is member of. The plain UNIX model involves a complete enumeration of the file /etc/group and its NSS
|
|---|
| 12 | counterparts in LDAP. UNIX has optimized functions to enumerate group membership. Sadly, other functions that
|
|---|
| 13 | are used to deal with user and group attributes lack such optimization.
|
|---|
| 14 | </para>
|
|---|
| 15 |
|
|---|
| 16 | <para>
|
|---|
| 17 | To make Samba scale well in large environments, the <smbconfoption name="ldapsam:trusted">yes</smbconfoption>
|
|---|
| 18 | option assumes that the complete user and group database that is relevant to Samba is stored in LDAP with the
|
|---|
| 19 | standard posixAccount/posixGroup attributes. It further assumes that the Samba auxiliary object classes are
|
|---|
| 20 | stored together with the POSIX data in the same LDAP object. If these assumptions are met,
|
|---|
| 21 | <smbconfoption name="ldapsam:trusted">yes</smbconfoption> can be activated and Samba can bypass the
|
|---|
| 22 | NSS system to query user group memberships. Optimized LDAP queries can greatly speed up domain logon and
|
|---|
| 23 | administration tasks. Depending on the size of the LDAP database a factor of 100 or more for common queries
|
|---|
| 24 | is easily achieved.
|
|---|
| 25 | </para>
|
|---|
| 26 |
|
|---|
| 27 | </description>
|
|---|
| 28 | <value type="default">no</value>
|
|---|
| 29 | </samba:parameter>
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.
