summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/winbind
Commit message (Collapse)AuthorAgeFilesLines
* lib/param: change the default for "winbind expand groups" to "0"Stefan Metzmacher2014-07-311-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | Expanding groups requires the usage of SAMR, which is often not possible with the trust account credentials. This has caused a lot of trouble in the past, as this is the only operation which requires a member to contact a dc of a trusted domain directly, which is not always possible. With this changed default, it should only be required to contact a dc of our own domain. This is the correct behavior for a domain member. As expanding groups is mostly cosmetic, we should avoid it. This is similar to "winbind enum users" and "winbind enum groups", which are also off by default. Only some broken applications calculate the group memberships of users by traversing groups, such applications will require "winbind expand groups = 1". Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Björn Jacke <bj@sernet.de> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu Jul 31 18:48:36 CEST 2014 on sn-devel-104
* s3: winbindd: Add new parameter "winbind request timeout" set to 60 seconds ↵Jeremy Allison2014-07-291-0/+16
| | | | | | | | | | | | | | | | | with man page. "This parameter specifies the number of seconds the winbindd daemon will wait before disconnecting either a client connection with no outstanding requests (idle) or a client connection with a request that has remained outstanding (hung) for longer than this number of seconds." Bug 3204 winbindd: Exceeding 200 client connections, no idle connection found https://bugzilla.samba.org/show_bug.cgi?id=3204 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ira Cooper <ira@samba.org>
* docs: insert meta data for idmap uid parameter - mark do not generate functionGarming Sam2014-02-031-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for idmap gid parameter - mark do not generate functionGarming Sam2014-02-031-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for idmap backend parameter - mark do not generate ↵Garming Sam2014-02-031-0/+1
| | | | | | | | function Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for winbind max domain connections parameter - mark ↵Garming Sam2014-02-031-0/+1
| | | | | | | | do not generate function Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for winbind nss info parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for winbind rpc only parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for create krb5 conf parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into winbind separator parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into winbindd socket directory parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into winbindd privileged socket directory parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into template shell parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into template homedir parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: change default of winbindd privileged socket directory to use an entityAndrew Bartlett2014-01-311-1/+1
| | | | | | Change-Id: Ia520090dbad50a6d3fc5b7bdc1982cfc15174b16 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: change default in winbindd socket directory to use an entityGarming Sam2014-01-311-1/+1
| | | | | | | Change-Id: I8b3305f789cf081c5289c9d2653aecd8aa828577 Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: update winbind refresh tickets example to be consistent with defaultAndrew Bartlett2014-01-281-1/+1
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: update winbind offline logon example to be consistent with defaultAndrew Bartlett2014-01-281-1/+1
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: include type attribute for winbind enum usersGarming Sam2014-01-281-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: modify winbind separator to remove unnecessary quotesGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: fix template shell to include the default correctlyGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: update idmap cache time to be consistent with testparmGarming Sam2014-01-281-2/+3
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: update winbind offline logon to be consistent with testparmGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: update winbind refresh tickets to be consistent with testparmGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs-xml: update 'winbind sealed pipes' descriptionStefan Metzmacher2014-01-071-3/+3
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* lib/param: add "require strong key" option, defaulting to trueStefan Metzmacher2014-01-071-0/+27
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* lib/param: add "reject md5 servers" option, defaulting to falseStefan Metzmacher2014-01-071-0/+23
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* lib/param: add "neutralize nt4 emulation" option, defaulting to falseStefan Metzmacher2014-01-071-0/+19
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs: remove duplicate "the" from smb.conf manpage.Günther Deschner2013-11-191-1/+1
| | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: Explain why this option should not be usedAndrew Bartlett2013-10-151-0/+5
| | | | | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Oct 15 01:51:39 CEST 2013 on sn-devel-104
* smb.conf(5): Fix mixing of tabs and spaces.Jelmer Vernooij2012-10-191-1/+1
|
* smb.conf(5): Add basic documentation 'winbind sealed pipes'.Jelmer Vernooij2012-10-181-0/+16
|
* smb.conf(5): Add : to idmap config description to mark it as parametric.Jelmer Vernooij2012-10-182-2/+2
|
* smb.conf(5): Add basic documentation for 'winbindd privileged socket directory'.Jelmer Vernooij2012-10-181-0/+14
|
* smb.conf(5): Add basic documentation for 'winbindd socket directory'.Jelmer Vernooij2012-10-181-0/+13
|
* Revert "smb.conf(5): Remove 'idmap config' documentation - the parameter has"Christian Ambach2012-09-271-0/+124
| | | | | | | | | | This reverts commit e809abf55f6a2e6d93bcb5678142f56c49aea397. This parameter still exists, it is just only used as parametric option in the code and not easy to spot when looking out for lp_xxx Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Thu Sep 27 06:18:38 CEST 2012 on sn-devel-104
* smb.conf(5): Remove 'idmap config' documentation - the parameter hasJelmer Vernooij2012-09-261-124/+0
| | | | been removed.
* doc: Remove documentation about idmap_adex.Andreas Schneider2012-07-031-5/+1
|
* doc: fix typo uniq → uniqueBjörn Jacke2012-06-131-1/+1
|
* s3/doc: some spelling fixesBjörn Jacke2012-06-113-4/+4
| | | | | | | Thanks to Frans Luteijn <f.a.g.luteijn at knoware.nl> for providing the fixes! Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Mon Jun 11 23:16:26 CEST 2012 on sn-devel-104
* s3-docs: Add a clarification note for nss_info primary group membership ↵Günther Deschner2011-10-191-1/+2
| | | | | | | | | calculation. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Oct 19 03:10:40 CEST 2011 on sn-devel-104
* s3-docs: Document Services for Unix 2.0 (sfu20) nss_info ldap schema support.Günther Deschner2011-10-191-2/+3
| | | | Guenther
* s3:doc: document "idmap gid" as deprecated.Michael Adam2011-05-311-8/+5
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue May 31 11:39:38 CEST 2011 on sn-devel-104
* s3:doc: document "idmap uid" as deprecated.Michael Adam2011-05-311-7/+5
|
* s3:doc: remove the documentation of "idmap alloc backend", which has been ↵Michael Adam2011-05-311-14/+0
| | | | removed
* s3:doc: document "idmap backend" as deprecated.Michael Adam2011-05-311-33/+2
|
* s3:doc: update documentation of the "idmap config FOO : BAR" familiy of ↵Michael Adam2011-05-311-20/+83
| | | | parameters
* s3:docs: remove documentation of "idmap read only" which was removed.Michael Adam2011-03-221-21/+0
|
* s3:docs: document "winbind max domain connections"Michael Adam2011-01-211-0/+24
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Fri Jan 21 14:33:57 CET 2011 on sn-devel-104
* s3: Add a word of warning about "winbind use default domain"Volker Lendecke2010-11-221-0/+4
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Nov 22 23:26:11 CET 2010 on sn-devel-104