Changeset 752 for trunk/server/docs/htmldocs/manpages/winbindd.8.html
- Timestamp:
- Nov 29, 2012, 2:06:31 PM (13 years ago)
- Location:
- trunk/server
- Files:
-
- 2 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/server
- Property svn:mergeinfo changed
/vendor/current merged: 746,748
- Property svn:mergeinfo changed
-
trunk/server/docs/htmldocs/manpages/winbindd.8.html
r745 r752 6 6 service to <code class="literal">smbd</code>, <code class="literal">ntlm_auth</code> 7 7 and the <code class="literal">pam_winbind.so</code> PAM module, by managing connections to 8 domain controllers. In this configuraiton the 9 <a class="link" href="smb.conf.5.html#IDMAPUID" target="_top">idmap uid</a> and 10 <a class="link" href="smb.conf.5.html#IDMAPGID" target="_top">idmap gid</a> 11 parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user 8 domain controllers. In this configuration the 9 <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:RANGE" target="_top">idmap config * : range</a> 10 parameter is not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user 12 11 and system information to be obtained from different databases 13 12 services such as NIS or DNS. The exact behaviour can be configured … … 56 55 WINS server.</p><pre class="programlisting"> 57 56 hosts: files wins 58 </pre></div><div class="refsect1" title="OPTIONS"><a name="id3070 77"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes57 </pre></div><div class="refsect1" title="OPTIONS"><a name="id307067"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes 59 58 the server to operate as a daemon. That is, it detaches 60 59 itself and runs in the background on the appropriate port. … … 114 113 default behavior is to launch a child process that is responsible for 115 114 updating expired cache entries. 116 </p></dd></dl></div></div><div class="refsect1" title="NAME AND ID RESOLUTION"><a name="id3073 16"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned115 </p></dd></dl></div></div><div class="refsect1" title="NAME AND ID RESOLUTION"><a name="id307306"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned 117 116 a security id (SID) which is globally unique when the 118 117 user or group is created. To convert the Windows NT user or group … … 128 127 store is deleted or corrupted, there is no way for winbindd to 129 128 determine which user and group ids correspond to Windows NT user 130 and group rids. </p></div><div class="refsect1" title="CONFIGURATION"><a name="id3073 45"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon129 and group rids. </p></div><div class="refsect1" title="CONFIGURATION"><a name="id307336"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon 131 130 is done through configuration parameters in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. All parameters should be specified in the 132 131 [global] section of smb.conf. </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p> 133 132 <a class="link" href="smb.conf.5.html#WINBINDSEPARATOR" target="_top">winbind separator</a></p></li><li class="listitem"><p> 134 <a class="link" href="smb.conf.5.html#IDMAPUID" target="_top">idmap uid</a></p></li><li class="listitem"><p> 135 <a class="link" href="smb.conf.5.html#IDMAPGID" target="_top">idmap gid</a></p></li><li class="listitem"><p> 136 <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a></p></li><li class="listitem"><p> 133 <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:RANGE" target="_top">idmap config * : range</a></p></li><li class="listitem"><p> 134 <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:BACKEND" target="_top">idmap config * : backend</a></p></li><li class="listitem"><p> 137 135 <a class="link" href="smb.conf.5.html#WINBINDCACHETIME" target="_top">winbind cache time</a></p></li><li class="listitem"><p> 138 136 <a class="link" href="smb.conf.5.html#WINBINDENUMUSERS" target="_top">winbind enum users</a></p></li><li class="listitem"><p> … … 145 143 instead of LDAP to retrieve information from Domain 146 144 Controllers. 147 </p></li></ul></div></div><div class="refsect1" title="EXAMPLE SETUP"><a name="id3074 90"></a><h2>EXAMPLE SETUP</h2><p>145 </p></li></ul></div></div><div class="refsect1" title="EXAMPLE SETUP"><a name="id307470"></a><h2>EXAMPLE SETUP</h2><p> 148 146 To setup winbindd for user and group lookups plus 149 147 authentication from a domain controller use something like the … … 186 184 template shell = /bin/bash 187 185 template homedir = /home/%D/%U 188 idmap uid = 10000-20000 189 idmap gid = 10000-20000 186 idmap config * : range = 10000-20000 190 187 workgroup = DOMAIN 191 188 security = domain … … 196 193 the DOMAIN+user syntax for the username. You may wish to use the 197 194 commands <code class="literal">getent passwd</code> and <code class="literal">getent group 198 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" title="NOTES"><a name="id3076 62"></a><h2>NOTES</h2><p>The following notes are useful when configuring and195 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" title="NOTES"><a name="id307642"></a><h2>NOTES</h2><p>The following notes are useful when configuring and 199 196 running <code class="literal">winbindd</code>: </p><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine 200 197 for <code class="literal">winbindd</code> to work. </p><p>PAM is really easy to misconfigure. Make sure you know what … … 203 200 then in general the user and groups ids allocated by winbindd will not 204 201 be the same. The user and group ids will only be valid for the local 205 machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAP BACKEND" target="_top">idmapbackend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping206 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" title="SIGNALS"><a name="id307 718"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the202 machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAPCONFIG*:BACKEND" target="_top">idmap config * : backend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping 203 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" title="SIGNALS"><a name="id307698"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the 207 204 <code class="literal">winbindd</code> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and 208 205 apply any parameter changes to the running … … 212 209 winbindd</code> to write status information to the winbind 213 210 log file.</p><p>Log files are stored in the filename specified by the 214 log file parameter.</p></dd></dl></div></div><div class="refsect1" title="FILES"><a name="id3077 76"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with211 log file parameter.</p></dd></dl></div></div><div class="refsect1" title="FILES"><a name="id307756"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with 215 212 the <code class="literal">winbindd</code> program. For security reasons, the 216 213 winbind client will only attempt to connect to the winbindd daemon … … 233 230 This directory is by default <code class="filename">/usr/local/samba/var/locks 234 231 </code>. </p></dd><dt><span class="term">$LOCKDIR/winbindd_cache.tdb</span></dt><dd><p>Storage for cached user and group information. 235 </p></dd></dl></div></div><div class="refsect1" title="VERSION"><a name="id307 908"></a><h2>VERSION</h2><p>This man page is correct for version 3 of236 the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id307 918"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" title="AUTHOR"><a name="id307973"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities232 </p></dd></dl></div></div><div class="refsect1" title="VERSION"><a name="id307888"></a><h2>VERSION</h2><p>This man page is correct for version 3 of 233 the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id307898"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" title="AUTHOR"><a name="id307953"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 237 234 were created by Andrew Tridgell. Samba is now developed 238 235 by the Samba Team as an Open Source project similar
Note:
See TracChangeset
for help on using the changeset viewer.