source: vendor/current/docs-xml/smbdotconf/security/allowtrusteddomains.xml

Last change on this file was 988, checked in by Silvan Scherrer, 9 years ago

Samba Server: update vendor to version 4.4.3

File size: 1.2 KB
Line 
1<samba:parameter name="allow trusted domains"
2 context="G"
3 type="boolean"
4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
5<description>
6 <para>
7 This option only takes effect when the <smbconfoption name="security"/> option is set to
8 <constant>server</constant>, <constant>domain</constant> or <constant>ads</constant>.
9 If it is set to no, then attempts to connect to a resource from
10 a domain or workgroup other than the one which smbd is running
11 in will fail, even if that domain is trusted by the remote server
12 doing the authentication.</para>
13
14 <para>This is useful if you only want your Samba server to
15 serve resources to users in the domain it is a member of. As
16 an example, suppose that there are two domains DOMA and DOMB. DOMB
17 is trusted by DOMA, which contains the Samba server. Under normal
18 circumstances, a user with an account in DOMB can then access the
19 resources of a UNIX account with the same account name on the
20 Samba server even if they do not have an account in DOMA. This
21 can make implementing a security boundary difficult.</para>
22</description>
23
24<value type="default">yes</value>
25</samba:parameter>
Note: See TracBrowser for help on using the repository browser.