Ignore:
Timestamp:
Nov 29, 2012, 2:06:31 PM (13 years ago)
Author:
Silvan Scherrer
Message:

Samba Server: updated trunk to 3.6.9 2nd part

Location:
trunk/server
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/server

  • trunk/server/docs/htmldocs/manpages/winbindd.8.html

    r745 r752  
    66        service to <code class="literal">smbd</code>, <code class="literal">ntlm_auth</code>
    77        and the <code class="literal">pam_winbind.so</code> PAM module, by managing connections to
    8         domain controllers.  In this configuraiton the
    9         <a class="link" href="smb.conf.5.html#IDMAPUID" target="_top">idmap uid</a> and
    10         <a class="link" href="smb.conf.5.html#IDMAPGID" target="_top">idmap gid</a>
    11         parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user
     8        domain controllers.  In this configuration the
     9        <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:RANGE" target="_top">idmap config * : range</a>
     10        parameter is not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user
    1211        and system information to be obtained from different databases
    1312        services such as NIS or DNS.  The exact behaviour can be configured
     
    5655        WINS server.</p><pre class="programlisting">
    5756hosts:          files wins
    58 </pre></div><div class="refsect1" title="OPTIONS"><a name="id307077"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes
     57</pre></div><div class="refsect1" title="OPTIONS"><a name="id307067"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes
    5958                the server to operate as a daemon. That is, it detaches
    6059                itself and runs in the background on the appropriate port.
     
    114113                default behavior is to launch a child process that is responsible for
    115114                updating expired cache entries.
    116                 </p></dd></dl></div></div><div class="refsect1" title="NAME AND ID RESOLUTION"><a name="id307316"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned
     115                </p></dd></dl></div></div><div class="refsect1" title="NAME AND ID RESOLUTION"><a name="id307306"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned
    117116        a security id (SID) which is globally unique when the
    118117        user or group is created.  To convert the Windows NT user or group
     
    128127        store is deleted or corrupted, there is no way for winbindd to
    129128        determine which user and group ids correspond to Windows NT user
    130         and group rids. </p></div><div class="refsect1" title="CONFIGURATION"><a name="id307345"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon
     129        and group rids. </p></div><div class="refsect1" title="CONFIGURATION"><a name="id307336"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon
    131130        is done through configuration parameters in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file.  All parameters should be specified in the
    132131        [global] section of smb.conf. </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>
    133132                <a class="link" href="smb.conf.5.html#WINBINDSEPARATOR" target="_top">winbind separator</a></p></li><li class="listitem"><p>
    134                 <a class="link" href="smb.conf.5.html#IDMAPUID" target="_top">idmap uid</a></p></li><li class="listitem"><p>
    135                 <a class="link" href="smb.conf.5.html#IDMAPGID" target="_top">idmap gid</a></p></li><li class="listitem"><p>
    136                 <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a></p></li><li class="listitem"><p>
     133                <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:RANGE" target="_top">idmap config * : range</a></p></li><li class="listitem"><p>
     134                <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:BACKEND" target="_top">idmap config * : backend</a></p></li><li class="listitem"><p>
    137135                <a class="link" href="smb.conf.5.html#WINBINDCACHETIME" target="_top">winbind cache time</a></p></li><li class="listitem"><p>
    138136                <a class="link" href="smb.conf.5.html#WINBINDENUMUSERS" target="_top">winbind enum users</a></p></li><li class="listitem"><p>
     
    145143                instead of LDAP to retrieve information from Domain
    146144                Controllers.
    147                 </p></li></ul></div></div><div class="refsect1" title="EXAMPLE SETUP"><a name="id307490"></a><h2>EXAMPLE SETUP</h2><p>
     145                </p></li></ul></div></div><div class="refsect1" title="EXAMPLE SETUP"><a name="id307470"></a><h2>EXAMPLE SETUP</h2><p>
    148146        To setup winbindd for user and group lookups plus
    149147        authentication from a domain controller use something like the
     
    186184        template shell = /bin/bash
    187185        template homedir = /home/%D/%U
    188         idmap uid = 10000-20000
    189         idmap gid = 10000-20000
     186        idmap config * : range = 10000-20000
    190187        workgroup = DOMAIN
    191188        security = domain
     
    196193        the DOMAIN+user syntax for the username. You may wish to use the
    197194        commands <code class="literal">getent passwd</code> and <code class="literal">getent group
    198         </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" title="NOTES"><a name="id307662"></a><h2>NOTES</h2><p>The following notes are useful when configuring and
     195        </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" title="NOTES"><a name="id307642"></a><h2>NOTES</h2><p>The following notes are useful when configuring and
    199196        running <code class="literal">winbindd</code>: </p><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine
    200197        for <code class="literal">winbindd</code> to work. </p><p>PAM is really easy to misconfigure.  Make sure you know what
     
    203200        then in general the user and groups ids allocated by winbindd will not
    204201        be the same.  The user and group ids will only be valid for the local
    205         machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping
    206         file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" title="SIGNALS"><a name="id307718"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the
     202        machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:BACKEND" target="_top">idmap config * : backend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping
     203        file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" title="SIGNALS"><a name="id307698"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the
    207204        <code class="literal">winbindd</code> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and
    208205                apply any parameter changes to the running
     
    212209                winbindd</code> to write status information to the winbind
    213210                log file.</p><p>Log files are stored in the filename specified by the
    214                 log file parameter.</p></dd></dl></div></div><div class="refsect1" title="FILES"><a name="id307776"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with
     211                log file parameter.</p></dd></dl></div></div><div class="refsect1" title="FILES"><a name="id307756"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with
    215212                the <code class="literal">winbindd</code> program.  For security reasons, the
    216213                winbind client will only attempt to connect to the winbindd daemon
     
    233230                This directory is by default <code class="filename">/usr/local/samba/var/locks
    234231                </code>. </p></dd><dt><span class="term">$LOCKDIR/winbindd_cache.tdb</span></dt><dd><p>Storage for cached user and group information.
    235                 </p></dd></dl></div></div><div class="refsect1" title="VERSION"><a name="id307908"></a><h2>VERSION</h2><p>This man page is correct for version 3 of
    236         the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id307918"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" title="AUTHOR"><a name="id307973"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
     232                </p></dd></dl></div></div><div class="refsect1" title="VERSION"><a name="id307888"></a><h2>VERSION</h2><p>This man page is correct for version 3 of
     233        the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id307898"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" title="AUTHOR"><a name="id307953"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
    237234        were created by Andrew Tridgell. Samba is now developed
    238235        by the Samba Team as an Open Source project similar
Note: See TracChangeset for help on using the changeset viewer.