Changeset 158 for branches/samba-3.0/docs/htmldocs/manpages/winbindd.8.html
- Timestamp:
- Sep 30, 2008, 7:14:08 AM (17 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.0/docs/htmldocs/manpages/winbindd.8.html
r134 r158 1 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>winbindd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="winbindd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>winbindd — Name Service Switch daemon for resolving names 2 from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">winbindd</code> [-D] [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div class="refsect1" lang="en"><a name="id2 82746"></a><h2>DESCRIPTION</h2><p>This program is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">winbindd</code> is a daemon that provides2 from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">winbindd</code> [-D] [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div class="refsect1" lang="en"><a name="id290810"></a><h2>DESCRIPTION</h2><p>This program is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">winbindd</code> is a daemon that provides 3 3 a number of services to the Name Service Switch capability found 4 4 in most modern C libraries, to arbitrary applications via PAM … … 6 6 service to <code class="literal">smbd</code>, <code class="literal">ntlm_auth</code> 7 7 and the <code class="literal">pam_winbind.so</code> PAM module, by managing connections to 8 domain controllers. In this configuraiton the 9 <a class="link" href="smb.conf.5.html#IDMAPUID">idmap uid</a> and 10 <a class="link" href="smb.conf.5.html#IDMAPGID">idmap gid</a> 11 parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user 8 domain controllers. In this configuration the 9 <a class="link" href="smb.conf.5.html#IDMAPUID">idmap uid</a> and <a class="link" href="smb.conf.5.html#IDMAPGID">idmap gid</a> 10 parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p>The Name Service Switch allows user 12 11 and system information to be obtained from different databases 13 12 services such as NIS or DNS. The exact behaviour can be configured 14 through tthe <code class="filename">/etc/nsswitch.conf</code> file.13 through the <code class="filename">/etc/nsswitch.conf</code> file. 15 14 Users and groups are allocated as they are resolved to a range 16 15 of user and group ids specified by the administrator of the … … 18 17 can be used to resolve user and group information from a 19 18 Windows NT server. The service can also provide authentication 20 services via an associated PAM module. 19 services via an associated PAM module.</p><p> 21 20 The <code class="filename">pam_winbind</code> module supports the 22 21 <em class="parameter"><code>auth</code></em>, <em class="parameter"><code>account</code></em> 23 and <em class="parameter"><code>password</code></em> 24 module-types. It should be noted that the 22 and <em class="parameter"><code>password</code></em> module-types. It should be noted that the 25 23 <em class="parameter"><code>account</code></em> module simply performs a getpwnam() to verify that 26 24 the system can obtain a uid for the user, as the domain … … 48 46 </code> and <code class="filename">/etc/group</code> and then from the 49 47 Windows NT server. 50 </p><pre class="programlisting">48 </p><pre class="programlisting"> 51 49 passwd: files winbind 52 50 group: files winbind 53 ## only available on IRIX; Linux users should us libnss_wins.so 54 hosts: files dns winbind 51 ## only available on IRIX: use winbind to resolve hosts: 52 # hosts: files dns winbind 53 ## All other NSS enabled systems should use libnss_wins.so like this: 54 hosts: files dns wins 55 55 56 </pre><p>The following simple configuration in the 56 57 <code class="filename">/etc/nsswitch.conf</code> file can be used to initially … … 58 59 WINS server.</p><pre class="programlisting"> 59 60 hosts: files wins 60 </pre></div><div class="refsect1" lang="en"><a name="id 324498"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-F</span></dt><dd><p>If specified, this parameter causes61 </pre></div><div class="refsect1" lang="en"><a name="id299800"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-F</span></dt><dd><p>If specified, this parameter causes 61 62 the main <code class="literal">winbindd</code> process to not daemonize, 62 63 i.e. double-fork and disassociate with the terminal. … … 111 112 default behavior is to launch a child process that is responsible for 112 113 updating expired cache entries. 113 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 24720"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned114 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id300022"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned 114 115 a security id (SID) which is globally unique when the 115 116 user or group is created. To convert the Windows NT user or group … … 127 128 and group rids. </p><p>See the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> or the old <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a> parameters in 128 129 <code class="filename">smb.conf</code> for options for sharing this 129 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id3 24773"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon130 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id300075"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon 130 131 is done through configuration parameters in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. All parameters should be specified in the 131 132 [global] section of smb.conf. </p><div class="itemizedlist"><ul type="disc"><li><p> … … 144 145 instead of LDAP to retrieve information from Domain 145 146 Controllers. 146 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id3 24918"></a><h2>EXAMPLE SETUP</h2><p>147 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id300220"></a><h2>EXAMPLE SETUP</h2><p> 147 148 To setup winbindd for user and group lookups plus 148 149 authentication from a domain controller use something like the … … 195 196 the DOMAIN+user syntax for the username. You may wish to use the 196 197 commands <code class="literal">getent passwd</code> and <code class="literal">getent group 197 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id3 25091"></a><h2>NOTES</h2><p>The following notes are useful when configuring and198 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id300393"></a><h2>NOTES</h2><p>The following notes are useful when configuring and 198 199 running <code class="literal">winbindd</code>: </p><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine 199 200 for <code class="literal">winbindd</code> to work. </p><p>PAM is really easy to misconfigure. Make sure you know what … … 203 204 be the same. The user and group ids will only be valid for the local 204 205 machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping 205 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id3 25147"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the206 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id300450"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the 206 207 <code class="literal">winbindd</code> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and 207 208 apply any parameter changes to the running … … 211 212 winbindd</code> to write status information to the winbind 212 213 log file.</p><p>Log files are stored in the filename specified by the 213 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 25205"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with214 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id300508"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with 214 215 the <code class="literal">winbindd</code> program. For security reasons, the 215 216 winbind client will only attempt to connect to the winbindd daemon … … 232 233 This directory is by default <code class="filename">/usr/local/samba/var/locks 233 234 </code>. </p></dd><dt><span class="term">$LOCKDIR/winbindd_cache.tdb</span></dt><dd><p>Storage for cached user and group information. 234 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 25338"></a><h2>VERSION</h2><p>This man page is correct for version 3.0of235 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 25349"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id325404"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities235 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id300641"></a><h2>VERSION</h2><p>This man page is correct for version 3 of 236 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id300651"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id300706"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 236 237 were created by Andrew Tridgell. Samba is now developed 237 238 by the Samba Team as an Open Source project similar
Note:
See TracChangeset
for help on using the changeset viewer.
