Changeset 988 for vendor/current/docs-xml/smbdotconf/winbind
- Timestamp:
- Nov 24, 2016, 1:14:11 PM (9 years ago)
- Location:
- vendor/current/docs-xml/smbdotconf/winbind
- Files:
-
- 6 added
- 25 edited
Legend:
- Unmodified
- Added
- Removed
-
vendor/current/docs-xml/smbdotconf/winbind/createkrb5conf.xml
r414 r988 1 1 <samba:parameter name="create krb5 conf" 2 context="G" 3 type="string" 4 advanced="1" developer="0" 2 context="G" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> 7 6 8 7 <para> 9 Setting this param ter to <value type="example">no</value> prevents8 Setting this parameter to <value type="example">no</value> prevents 10 9 winbind from creating custom krb5.conf files. Winbind normally does 11 10 this because the krb5 libraries are not AD-site-aware and thus would -
vendor/current/docs-xml/smbdotconf/winbind/idmapbackend.xml
r740 r988 1 1 <samba:parameter name="idmap backend" 2 2 context="G" 3 type="string" 4 advanced="1" developer="1" hide="1" 3 type="string" 4 generated_function="0" 5 handler="handle_idmap_backend" 6 deprecated="1" 5 7 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 8 <description> -
vendor/current/docs-xml/smbdotconf/winbind/idmapcachetime.xml
r414 r988 1 1 <samba:parameter name="idmap cache time" 2 2 context="G" 3 type="integer" 4 advanced="1" developer="1" 3 type="integer" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> 7 6 <para>This parameter specifies the number of seconds that Winbind's 8 idmap interface will cache positive SID/uid/gid query results. 7 idmap interface will cache positive SID/uid/gid query results. By 8 default, Samba will cache these results for one week. 9 9 </para> 10 10 </description> 11 11 12 <value type="default">604800 (one week)</value>12 <value type="default">604800</value> 13 13 </samba:parameter> -
vendor/current/docs-xml/smbdotconf/winbind/idmapconfig.xml
r740 r988 1 <samba:parameter name="idmap config "1 <samba:parameter name="idmap config DOMAIN : OPTION" 2 2 context="G" 3 type="string" 4 advanced="1" developer="1" hide="1" 3 type="string" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> … … 18 17 <para> 19 18 The idmap configuration is hence divided into groups, one group 20 for each domain to be configured, and one group with the the21 asterisk instead of a proper domain name, which spe ifies the19 for each domain to be configured, and one group with the 20 asterisk instead of a proper domain name, which specifies the 22 21 default configuration that is used to catch all domains that do 23 22 not have an explicit idmap configuration of their own. … … 40 39 ldap 41 40 (<citerefentry><refentrytitle>idmap_ldap</refentrytitle> <manvolnum>8</manvolnum></citerefentry>), 42 ,43 41 rid 44 42 (<citerefentry><refentrytitle>idmap_rid</refentrytitle> <manvolnum>8</manvolnum></citerefentry>), 45 ,46 43 hash 47 44 (<citerefentry><refentrytitle>idmap_hash</refentrytitle> <manvolnum>8</manvolnum></citerefentry>), 48 ,49 45 autorid 50 46 (<citerefentry><refentrytitle>idmap_autorid</refentrytitle> <manvolnum>8</manvolnum></citerefentry>), 51 ,52 47 ad 53 (<citerefentry><refentrytitle>idmap_ad</refentrytitle> <manvolnum>8</manvolnum></citerefentry>), 54 , 55 adex 56 (<citerefentry><refentrytitle>idmap_adex</refentrytitle> <manvolnum>8</manvolnum></citerefentry>), 57 , 58 and nss. 59 (<citerefentry><refentrytitle>idmap_nss</refentrytitle> <manvolnum>8</manvolnum></citerefentry>), 48 (<citerefentry><refentrytitle>idmap_ad</refentrytitle> <manvolnum>8</manvolnum></citerefentry>) 49 and nss 50 (<citerefentry><refentrytitle>idmap_nss</refentrytitle> <manvolnum>8</manvolnum></citerefentry>). 60 51 The corresponding manual pages contain the details, but 61 52 here is a summary. … … 70 61 each domain encountered and then uses the rid algorithm for each 71 62 of these automatically configured domains individually. 72 The ad and adex 73 backends both use unix IDs stored in Active Directory via 63 The ad backend uses unix ids stored in Active Directory via 74 64 the standard schema extensions. The nss backend reverses 75 the standard winbindd setup and gets the unix ids via names65 the standard winbindd setup and gets the unix ids via names 76 66 from nsswitch which can be useful in an ldap setup. 77 67 </para></listitem> … … 84 74 backend is authoritative. For allocating backends, this also 85 75 defines the start and the end of the range for allocating 86 new uni dIDs.76 new unique IDs. 87 77 </para> 88 78 <para> -
vendor/current/docs-xml/smbdotconf/winbind/idmapgid.xml
r740 r988 1 1 <samba:parameter name="idmap gid" 2 2 context="G" 3 type="string" 4 advanced="1" developer="1" hide="1" 3 type="string" 4 generated_function="0" 5 handler="handle_idmap_gid" 6 deprecated="1" 5 7 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 8 <synonym>winbind gid</synonym> 7 9 <description> 8 10 <para> -
vendor/current/docs-xml/smbdotconf/winbind/idmapnegativecachetime.xml
r414 r988 1 1 <samba:parameter name="idmap negative cache time" 2 2 context="G" 3 type="integer" 4 advanced="1" developer="1" 3 type="integer" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/idmapuid.xml
r740 r988 1 1 <samba:parameter name="idmap uid" 2 2 type="string" 3 3 context="G" 4 advanced="1" developer="1" hide="1" 4 generated_function="0" 5 handler="handle_idmap_uid" 6 deprecated="1" 5 7 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 8 <synonym>winbind uid</synonym> -
vendor/current/docs-xml/smbdotconf/winbind/templatehomedir.xml
r414 r988 1 1 <samba:parameter name="template homedir" 2 2 context="G" 3 advanced="1" developer="1"4 type="string"3 type="string" 4 constant="1" 5 5 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 6 <description> -
vendor/current/docs-xml/smbdotconf/winbind/templateshell.xml
r414 r988 1 1 <samba:parameter name="template shell" 2 2 context="G" 3 4 advanced="1" developer="1"3 type="string" 4 constant="1" 5 5 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 6 <description> … … 11 11 </description> 12 12 13 <value type=" string">/bin/false</value>13 <value type="default">/bin/false</value> 14 14 </samba:parameter> -
vendor/current/docs-xml/smbdotconf/winbind/winbindcachetime.xml
r414 r988 1 1 <samba:parameter name="winbind cache time" 2 2 context="G" 3 type="integer" 4 advanced="1" developer="1" 3 type="integer" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindenumgroups.xml
r414 r988 1 1 <samba:parameter name="winbind enum groups" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindenumusers.xml
r414 r988 1 1 <samba:parameter name="winbind enum users" 2 2 context="G" 3 advanced="1" developer="1"3 type="boolean" 4 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 5 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
r414 r988 1 1 <samba:parameter name="winbind expand groups" 2 2 context="G" 3 type="integer" 4 advanced="1" developer="1" 3 type="integer" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> … … 18 17 must perform the group unrolling and will be unable to answer 19 18 incoming NSS or authentication requests during this time.</para> 20 19 20 <para>The default value was changed from 1 to 0 with Samba 4.2. 21 Some broken applications calculate the group memberships of 22 users by traversing groups, such applications will require 23 "winbind expand groups = 1". But the new default makes winbindd more reliable 24 as it doesn't require SAMR access to domain controllers of trusted domains.</para> 21 25 </description> 22 26 23 <value type="default"> 1</value>27 <value type="default">0</value> 24 28 </samba:parameter> -
vendor/current/docs-xml/smbdotconf/winbind/winbindmaxclients.xml
r740 r988 1 1 <samba:parameter name="winbind max clients" 2 2 context="G" 3 type="integer" 4 advanced="1" developer="1" 3 type="integer" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> … … 8 7 the <citerefentry><refentrytitle>winbindd</refentrytitle> 9 8 <manvolnum>8</manvolnum></citerefentry> daemon can connect with. 9 The parameter is not a hard limit. 10 The <citerefentry><refentrytitle>winbindd</refentrytitle> 11 <manvolnum>8</manvolnum></citerefentry> daemon configures 12 itself to be able to accept at least that many connections, 13 and if the limit is reached, an attempt is made to disconnect 14 idle clients. 10 15 </para> 11 16 </description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindmaxdomainconnections.xml
r740 r988 1 1 <samba:parameter name="winbind max domain connections" 2 3 4 advanced="1" developer="1"5 2 context="G" 3 type="integer" 4 function="_winbind_max_domain_connections" 5 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 6 <description> 7 7 <para>This parameter specifies the maximum number of simultaneous -
vendor/current/docs-xml/smbdotconf/winbind/winbindnestedgroups.xml
r414 r988 1 1 <samba:parameter name="winbind nested groups" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindnormalizenames.xml
r414 r988 1 1 <samba:parameter name="winbind normalize names" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> … … 22 21 name aliasing for a specific configuration. Name aliasing takes 23 22 precedence (and is mutually exclusive) over the whitespace 24 replacement mechanism discussed previ souly.23 replacement mechanism discussed previously. 25 24 </para> 26 25 -
vendor/current/docs-xml/smbdotconf/winbind/winbindnssinfo.xml
r478 r988 1 1 <samba:parameter name="winbind nss info" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="cmdlist" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> … … 19 18 20 19 <listitem> 21 <para><parameter moreinfo="none"><sfu | rfc2307 ></parameter>20 <para><parameter moreinfo="none"><sfu | sfu20 | rfc2307 ></parameter> 22 21 - When Samba is running in security = ads and your Active Directory 23 22 Domain Controller does support the Microsoft "Services for Unix" (SFU) 24 23 LDAP schema, winbind can retrieve the login shell and the home 25 directory attributes directly from your Directory Server. Note that 24 directory attributes directly from your Directory Server. For SFU 3.0 or 3.5 simply choose 25 "sfu", if you use SFU 2.0 please choose "sfu20". Note that 26 26 retrieving UID and GID from your ADS-Server requires to 27 27 use <parameter moreinfo="none">idmap config DOMAIN:backend</parameter> = ad 28 as well. 28 as well. The primary group membership is currently 29 always calculated via the "primaryGroupID" LDAP attribute. 29 30 </para> 30 31 </listitem> -
vendor/current/docs-xml/smbdotconf/winbind/winbindofflinelogon.xml
r414 r988 1 1 <samba:parameter name="winbind offline logon" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> 7 6 8 7 <para>This parameter is designed to control whether Winbind should 9 allow to login with the <parameter moreinfo="none">pam_winbind</parameter>8 allow one to login with the <parameter moreinfo="none">pam_winbind</parameter> 10 9 module using Cached Credentials. If enabled, winbindd will store user credentials 11 10 from successful logins encrypted in a local cache. … … 14 13 </description> 15 14 16 <value type="default"> false</value>17 <value type="example"> true</value>15 <value type="default">no</value> 16 <value type="example">yes</value> 18 17 </samba:parameter> -
vendor/current/docs-xml/smbdotconf/winbind/winbindreconnectdelay.xml
r414 r988 1 1 <samba:parameter name="winbind reconnect delay" 2 2 context="G" 3 type="integer" 4 advanced="1" developer="1" 3 type="integer" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindrefreshtickets.xml
r414 r988 1 1 <samba:parameter name="winbind refresh tickets" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> … … 12 11 </description> 13 12 14 <value type="default"> false</value>15 <value type="example"> true</value>13 <value type="default">no</value> 14 <value type="example">yes</value> 16 15 </samba:parameter> -
vendor/current/docs-xml/smbdotconf/winbind/winbindrpconly.xml
r414 r988 1 1 <samba:parameter name="winbind rpc only" 2 context="G" 3 type="string" 4 advanced="1" developer="0" 2 context="G" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindseparator.xml
r414 r988 1 1 <samba:parameter name="winbind separator" 2 2 context="G" 3 advanced="1" developer="1"4 type="string"3 type="string" 4 constant="1" 5 5 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 6 <description> … … 17 17 </description> 18 18 19 <value type="default"> '\'</value>19 <value type="default">\</value> 20 20 <value type="example">+</value> 21 21 </samba:parameter> -
vendor/current/docs-xml/smbdotconf/winbind/winbindtrusteddomainsonly.xml
r414 r988 1 1 <samba:parameter name="winbind trusted domains only" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description> -
vendor/current/docs-xml/smbdotconf/winbind/winbindusedefaultdomain.xml
r740 r988 1 1 <samba:parameter name="winbind use default domain" 2 2 context="G" 3 type="boolean" 4 advanced="1" developer="1" 3 type="boolean" 5 4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> 6 5 <description>
Note:
See TracChangeset
for help on using the changeset viewer.