Changeset 286 for branches/samba-3.0/docs/htmldocs/manpages/winbindd.8.html
- Timestamp:
- Jun 24, 2009, 5:09:21 PM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.0/docs/htmldocs/manpages/winbindd.8.html
r158 r286 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>winbindd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.7 3.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="winbindd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>winbindd — Name Service Switch daemon for resolving names2 from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">winbindd</code> [-D] [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div class="refsect1" lang="en"><a name="id2 90810"></a><h2>DESCRIPTION</h2><p>This program is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">winbindd</code> is a daemon that provides1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>winbindd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="winbindd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>winbindd — Name Service Switch daemon for resolving names 2 from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">winbindd</code> [-D] [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div class="refsect1" lang="en"><a name="id2483363"></a><h2>DESCRIPTION</h2><p>This program is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">winbindd</code> is a daemon that provides 3 3 a number of services to the Name Service Switch capability found 4 4 in most modern C libraries, to arbitrary applications via PAM … … 7 7 and the <code class="literal">pam_winbind.so</code> PAM module, by managing connections to 8 8 domain controllers. In this configuration the 9 <a class="link" href="smb.conf.5.html#IDMAPUID" >idmap uid</a> and <a class="link" href="smb.conf.5.html#IDMAPGID">idmap gid</a>9 <a class="link" href="smb.conf.5.html#IDMAPUID" target="_top">idmap uid</a> and <a class="link" href="smb.conf.5.html#IDMAPGID" target="_top">idmap gid</a> 10 10 parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p>The Name Service Switch allows user 11 11 and system information to be obtained from different databases … … 59 59 WINS server.</p><pre class="programlisting"> 60 60 hosts: files wins 61 </pre></div><div class="refsect1" lang="en"><a name="id2 99800"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-F</span></dt><dd><p>If specified, this parameter causes61 </pre></div><div class="refsect1" lang="en"><a name="id2481563"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-F</span></dt><dd><p>If specified, this parameter causes 62 62 the main <code class="literal">winbindd</code> process to not daemonize, 63 63 i.e. double-fork and disassociate with the terminal. … … 83 83 use only by developers and generate HUGE amounts of log 84 84 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 85 override the <a class="link" href="smb.conf.5.html#LOGLEVEL" >log level</a> parameter85 override the <a class="link" href="smb.conf.5.html#LOGLEVEL" target="_top">log level</a> parameter 86 86 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 87 87 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the … … 112 112 default behavior is to launch a child process that is responsible for 113 113 updating expired cache entries. 114 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id 300022"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned114 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2481823"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned 115 115 a security id (SID) which is globally unique when the 116 116 user or group is created. To convert the Windows NT user or group … … 126 126 store is deleted or corrupted, there is no way for winbindd to 127 127 determine which user and group ids correspond to Windows NT user 128 and group rids. </p><p>See the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" >idmap domains</a> or the old <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a> parameters in128 and group rids. </p><p>See the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" target="_top">idmap domains</a> or the old <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a> parameters in 129 129 <code class="filename">smb.conf</code> for options for sharing this 130 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id 300075"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon130 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id2481893"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon 131 131 is done through configuration parameters in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. All parameters should be specified in the 132 132 [global] section of smb.conf. </p><div class="itemizedlist"><ul type="disc"><li><p> 133 <a class="link" href="smb.conf.5.html#WINBINDSEPARATOR" >winbind separator</a></p></li><li><p>134 <a class="link" href="smb.conf.5.html#IDMAPUID" >idmap uid</a></p></li><li><p>135 <a class="link" href="smb.conf.5.html#IDMAPGID" >idmap gid</a></p></li><li><p>136 <a class="link" href="smb.conf.5.html#IDMAPBACKEND" >idmap backend</a></p></li><li><p>137 <a class="link" href="smb.conf.5.html#WINBINDCACHETIME" >winbind cache time</a></p></li><li><p>138 <a class="link" href="smb.conf.5.html#WINBINDENUMUSERS" >winbind enum users</a></p></li><li><p>139 <a class="link" href="smb.conf.5.html#WINBINDENUMGROUPS" >winbind enum groups</a></p></li><li><p>140 <a class="link" href="smb.conf.5.html#TEMPLATEHOMEDIR" >template homedir</a></p></li><li><p>141 <a class="link" href="smb.conf.5.html#TEMPLATESHELL" >template shell</a></p></li><li><p>142 <a class="link" href="smb.conf.5.html#WINBINDUSEDEFAULTDOMAIN" >winbind use default domain</a></p></li><li><p>143 <a class="link" href="smb.conf.5.html#WINBIND:RPCONLY" >winbind: rpc only</a>133 <a class="link" href="smb.conf.5.html#WINBINDSEPARATOR" target="_top">winbind separator</a></p></li><li><p> 134 <a class="link" href="smb.conf.5.html#IDMAPUID" target="_top">idmap uid</a></p></li><li><p> 135 <a class="link" href="smb.conf.5.html#IDMAPGID" target="_top">idmap gid</a></p></li><li><p> 136 <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a></p></li><li><p> 137 <a class="link" href="smb.conf.5.html#WINBINDCACHETIME" target="_top">winbind cache time</a></p></li><li><p> 138 <a class="link" href="smb.conf.5.html#WINBINDENUMUSERS" target="_top">winbind enum users</a></p></li><li><p> 139 <a class="link" href="smb.conf.5.html#WINBINDENUMGROUPS" target="_top">winbind enum groups</a></p></li><li><p> 140 <a class="link" href="smb.conf.5.html#TEMPLATEHOMEDIR" target="_top">template homedir</a></p></li><li><p> 141 <a class="link" href="smb.conf.5.html#TEMPLATESHELL" target="_top">template shell</a></p></li><li><p> 142 <a class="link" href="smb.conf.5.html#WINBINDUSEDEFAULTDOMAIN" target="_top">winbind use default domain</a></p></li><li><p> 143 <a class="link" href="smb.conf.5.html#WINBIND:RPCONLY" target="_top">winbind: rpc only</a> 144 144 Setting this parameter forces winbindd to use RPC 145 145 instead of LDAP to retrieve information from Domain 146 146 Controllers. 147 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id 300220"></a><h2>EXAMPLE SETUP</h2><p>147 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id2532543"></a><h2>EXAMPLE SETUP</h2><p> 148 148 To setup winbindd for user and group lookups plus 149 149 authentication from a domain controller use something like the … … 196 196 the DOMAIN+user syntax for the username. You may wish to use the 197 197 commands <code class="literal">getent passwd</code> and <code class="literal">getent group 198 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id 300393"></a><h2>NOTES</h2><p>The following notes are useful when configuring and198 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id2532734"></a><h2>NOTES</h2><p>The following notes are useful when configuring and 199 199 running <code class="literal">winbindd</code>: </p><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine 200 200 for <code class="literal">winbindd</code> to work. </p><p>PAM is really easy to misconfigure. Make sure you know what … … 203 203 then in general the user and groups ids allocated by winbindd will not 204 204 be the same. The user and group ids will only be valid for the local 205 machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAPBACKEND" >idmap backend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping206 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id 300450"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the205 machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping 206 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id2532799"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the 207 207 <code class="literal">winbindd</code> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and 208 208 apply any parameter changes to the running … … 212 212 winbindd</code> to write status information to the winbind 213 213 log file.</p><p>Log files are stored in the filename specified by the 214 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id 300508"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with214 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2532862"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with 215 215 the <code class="literal">winbindd</code> program. For security reasons, the 216 216 winbind client will only attempt to connect to the winbindd daemon … … 233 233 This directory is by default <code class="filename">/usr/local/samba/var/locks 234 234 </code>. </p></dd><dt><span class="term">$LOCKDIR/winbindd_cache.tdb</span></dt><dd><p>Storage for cached user and group information. 235 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id 300641"></a><h2>VERSION</h2><p>This man page is correct for version 3 of236 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id 300651"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id300706"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities235 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2533008"></a><h2>VERSION</h2><p>This man page is correct for version 3 of 236 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2533019"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id2533074"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 237 237 were created by Andrew Tridgell. Samba is now developed 238 238 by the Samba Team as an Open Source project similar
Note:
See TracChangeset
for help on using the changeset viewer.
