Changeset 745 for trunk/server/docs-xml/manpages-3/idmap_ad.8.xml

Timestamp:

Nov 27, 2012, 4:43:17 PM (13 years ago)

Author:

Silvan Scherrer

Message:

Samba Server: updated trunk to 3.6.0

Location:

trunk/server

Files:

• . (modified) (1 prop)
• docs-xml/manpages-3/idmap_ad.8.xml (modified) (3 diffs)

trunk/server/docs-xml/manpages-3/idmap_ad.8.xml

@@ -8 +8 @@
         <refmiscinfo class="source">Samba</refmiscinfo>
         <refmiscinfo class="manual">System Administration tools</refmiscinfo>
-        <refmiscinfo class="version">3.5</refmiscinfo>
+        <refmiscinfo class="version">3.6</refmiscinfo>
 </refmeta>
 
@@ -26 +26 @@
         classes and relative attribute/value pairs to the user and
         group objects in the AD.</para>
+
+        <para>
+        Note that the idmap_ad module has changed considerably since
+        Samba versions 3.0 and 3.2.
+        Currently, the <parameter>ad</parameter> backend
+        does not work as the the default idmap backend, but one has
+        to configure it separately for each domain for which one wants
+        to use it, using disjoint ranges. One usually needs to configure
+        a writeable default idmap range, using for example the
+        <parameter>tdb</parameter> or <parameter>ldap</parameter>
+        backend, in order to be able to map the BUILTIN sids and
+        possibly other trusted domains. The writeable default config
+        is also needed in order to be able to create group mappings.
+        This catch-all default idmap configuration should have a range
+        that is disjoint from any explicitly configured domain with
+        idmap backend <parameter>ad</parameter>. See the example below.
+        </para>
 </refsynopsisdiv>
 
@@ -69 +86 @@
         <programlisting>
         [global]
-        idmap backend = tdb
-        idmap uid = 1000000-1999999
-        idmap gid = 1000000-1999999
+        idmap config * : backend = tdb
+        idmap config * : range = 1000000-1999999
 
         idmap config CORP : backend  = ad