Changeset 22 for trunk/samba/docs/htmldocs/manpages/winbindd.8.html
- Timestamp:
- Mar 25, 2007, 5:18:51 PM (18 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/samba/docs/htmldocs/manpages/winbindd.8.html
r1 r22 4 4 in most modern C libraries, to arbitary applications via PAM 5 5 and <span><strong class="command">ntlm_auth</strong></span> and to Samba itself.</p><p>Even if winbind is not used for nsswitch, it still provides a 6 7 8 9 10 11 6 service to <span><strong class="command">smbd</strong></span>, <span><strong class="command">ntlm_auth</strong></span> 7 and the <span><strong class="command">pam_winbind.so</strong></span> PAM module, by managing connections to 8 domain controllers. In this configuraiton the 9 <a class="indexterm" name="id231194"></a>idmap uid and 10 <a class="indexterm" name="id231201"></a>idmap gid 11 parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user 12 12 and system information to be obtained from different databases 13 13 services such as NIS or DNS. The exact behaviour can be configured … … 85 85 use only by developers and generate HUGE amounts of log 86 86 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 87 override the <a class="indexterm" name="id27177 6"></a> parameter87 override the <a class="indexterm" name="id271775"></a> parameter 88 88 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 89 89 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, … … 116 116 users and groups will be mapped as soon as a client performs a user 117 117 or group enumeration command. The allocated unix ids are stored 118 in a database file under the Samba lock directory and will be 119 remembered. </p><p>WARNING: The SID to unix id database is the only location 118 in a database and will be remembered. </p><p>WARNING: The SID to unix id database is the only location 120 119 where the user and group mappings are stored by winbindd. If this 121 file is deleted or corrupted, there is no way for winbindd to120 store is deleted or corrupted, there is no way for winbindd to 122 121 determine which user and group ids correspond to Windows NT user 123 and group rids. </p><p>See the <a class="indexterm" name="id27191 5"></a> parameterin122 and group rids. </p><p>See the <a class="indexterm" name="id271914"></a> or the old <a class="indexterm" name="id271920"></a> parameters in 124 123 <code class="filename">smb.conf</code> for options for sharing this 125 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id2719 29"></a><h2>CONFIGURATION</h2><p>Configuration of the <span><strong class="command">winbindd</strong></span> daemon124 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id271934"></a><h2>CONFIGURATION</h2><p>Configuration of the <span><strong class="command">winbindd</strong></span> daemon 126 125 is done through configuration parameters in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. All parameters should be specified in the 127 126 [global] section of smb.conf. </p><div class="itemizedlist"><ul type="disc"><li><p> 128 <a class="indexterm" name="id2719 59"></a>winbind separator</p></li><li><p>129 <a class="indexterm" name="id27197 1"></a>idmap uid</p></li><li><p>130 <a class="indexterm" name="id27198 2"></a>idmap gid</p></li><li><p>131 <a class="indexterm" name="id27199 3"></a>idmap backend</p></li><li><p>132 <a class="indexterm" name="id2720 05"></a>winbind cache time</p></li><li><p>133 <a class="indexterm" name="id2720 16"></a>winbind enum users</p></li><li><p>134 <a class="indexterm" name="id2720 27"></a>winbind enum groups</p></li><li><p>135 <a class="indexterm" name="id2720 39"></a>template homedir</p></li><li><p>136 <a class="indexterm" name="id27205 0"></a>template shell</p></li><li><p>137 <a class="indexterm" name="id27206 1"></a>winbind use default domain</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id272072"></a><h2>EXAMPLE SETUP</h2><p>127 <a class="indexterm" name="id271964"></a>winbind separator</p></li><li><p> 128 <a class="indexterm" name="id271976"></a>idmap uid</p></li><li><p> 129 <a class="indexterm" name="id271987"></a>idmap gid</p></li><li><p> 130 <a class="indexterm" name="id271998"></a>idmap backend</p></li><li><p> 131 <a class="indexterm" name="id272010"></a>winbind cache time</p></li><li><p> 132 <a class="indexterm" name="id272021"></a>winbind enum users</p></li><li><p> 133 <a class="indexterm" name="id272032"></a>winbind enum groups</p></li><li><p> 134 <a class="indexterm" name="id272044"></a>template homedir</p></li><li><p> 135 <a class="indexterm" name="id272055"></a>template shell</p></li><li><p> 136 <a class="indexterm" name="id272066"></a>winbind use default domain</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id272077"></a><h2>EXAMPLE SETUP</h2><p> 138 137 To setup winbindd for user and group lookups plus 139 138 authentication from a domain controller use something like the … … 186 185 the DOMAIN+user syntax for the username. You may wish to use the 187 186 commands <span><strong class="command">getent passwd</strong></span> and <span><strong class="command">getent group 188 </strong></span> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id27226 3"></a><h2>NOTES</h2><p>The following notes are useful when configuring and187 </strong></span> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id272268"></a><h2>NOTES</h2><p>The following notes are useful when configuring and 189 188 running <span><strong class="command">winbindd</strong></span>: </p><p><a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine 190 189 for <span><strong class="command">winbindd</strong></span> to work. </p><p>PAM is really easy to misconfigure. Make sure you know what … … 193 192 then in general the user and groups ids allocated by winbindd will not 194 193 be the same. The user and group ids will only be valid for the local 195 machine, unless a shared <a class="indexterm" name="id27231 0"></a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping196 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id27232 2"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the194 machine, unless a shared <a class="indexterm" name="id272315"></a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping 195 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id272327"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the 197 196 <span><strong class="command">winbindd</strong></span> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and 198 197 apply any parameter changes to the running … … 202 201 winbindd</strong></span> to write status information to the winbind 203 202 log file.</p><p>Log files are stored in the filename specified by the 204 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2723 85"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with203 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id272390"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with 205 204 the <span><strong class="command">winbindd</strong></span> program. For security reasons, the 206 205 winbind client will only attempt to connect to the winbindd daemon … … 223 222 This directory is by default <code class="filename">/usr/local/samba/var/locks 224 223 </code>. </p></dd><dt><span class="term">$LOCKDIR/winbindd_cache.tdb</span></dt><dd><p>Storage for cached user and group information. 225 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2725 29"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of226 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id27254 0"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id272597"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities224 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id272534"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 225 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id272545"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id272602"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 227 226 were created by Andrew Tridgell. Samba is now developed 228 227 by the Samba Team as an Open Source project similar
Note:
See TracChangeset
for help on using the changeset viewer.
