summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf
diff options
context:
space:
mode:
Diffstat (limited to 'docs-xml/smbdotconf')
-rw-r--r--docs-xml/smbdotconf/winbind/winbindexpandgroups.xml9
1 files changed, 7 insertions, 2 deletions
diff --git a/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml b/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
index 19b81b3e0a..57077b3cea 100644
--- a/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
+++ b/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
@@ -17,8 +17,13 @@
result in system slowdown as the main parent winbindd daemon
must perform the group unrolling and will be unable to answer
incoming NSS or authentication requests during this time.</para>
-
+
+ <para>The default value was changed from 1 to 0 with Samba 4.2.
+ Some broken applications calculate the group memberships of
+ users by traversing groups, such applications will require
+ "winbind expand groups = 1". But the new default makes winbindd more reliable
+ as it doesn't require SAMR access to domain controllers of trusted domains.</para>
</description>
-<value type="default">1</value>
+<value type="default">0</value>
</samba:parameter>