From 55abd936a838a4410899db76cb5530b0c4694dc9 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Wed, 10 Oct 2001 17:19:10 +0000 Subject: mega-merge from 2.2 (This used to be commit c76bf8ed3275e217d1b691879153fe9137bcbe38) --- docs/htmldocs/winbindd.8.html | 102 +++++++++++++++++++++--------------------- 1 file changed, 50 insertions(+), 52 deletions(-) (limited to 'docs/htmldocs/winbindd.8.html') diff --git a/docs/htmldocs/winbindd.8.html b/docs/htmldocs/winbindd.8.html index 938c2dcb2fc..ad54228a6f4 100644 --- a/docs/htmldocs/winbindd.8.html +++ b/docs/htmldocs/winbindd.8.html @@ -36,23 +36,22 @@ NAME="AEN8" >

nmblookup [-d debuglevel] [-i] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] {name}

winbindd [-i] [-d <debug level>] [-s <smb config file>]

DESCRIPTION

This tool is part of the This program is part of the Samba suite version 3.0 and describes functionality not - yet implemented in the main version of Samba.

suite.

The service provided by winbindd is called `winbind' and +>The service provided by winbindd is called `winbind' and can be used to resolve user and group information from a Windows NT server. The service can also provide authentication services via an associated PAM module.

OPTIONS

NAME AND ID RESOLUTION

CONFIGURATION

The winbind uid parameter specifies the range of user ids that are allocated by the winbindd daemon. - This range of ids should have no existing local or nis users + This range of ids should have no existing local or NIS users within it as strange conflicts can occur otherwise.

Default:

The winbind gid parameter specifies the range of group ids that are allocated by the winbindd daemon. - This range of group ids should have no existing local or nis + This range of group ids should have no existing local or NIS groups within it as strange conflicts can occur otherwise.

Default: Warning: Turning off user enumeration - may cause some programs to behave oddly. For example, the finger + may cause some programs to behave oddly. For example, the finger program relies on having access to the full user list when searching for matching usernames.

EXAMPLE SETUP

The next step is to join the domain. To do that use the sameditsmbpasswd program like this:

samedit -S '*' -W DOMAIN -UAdministratorsmbpasswd -j DOMAIN -r PDC -U + Administrator

The username after the -U can be any Domain - user that has administrator priviliges on the machine. Next from - within samedit, run the command:

createuser MACHINE$ -j DOMAIN -L

This assumes your domain is called "DOMAIN" and your Samba - workstation is called "MACHINE".

can be any + Domain user that has administrator privileges on the machine. + Substitute your domain name for "DOMAIN" and the name of your PDC + for "PDC".

Next copy /lib/libnss_winbind.so.1.

Finally, setup a smb.conf containing directives like the +>Finally, setup a smb.conf containing directives like the following:

Notes

NOTES

The following notes are useful when configuring and running winbindd nsswitch module read an environment variable named $WINBINDD_DOMAIN $WINBINDD_DOMAIN. If this variable contains a comma separated list of Windows NT domain names, then winbindd will only resolve users and groups within those Windows NT domains.

Signals

SIGNALS

The following signals can be used to manipulate the

Files

FILES

Storage for the Windows NT rid to UNIX user/group id mapping. The lock directory is specified when Samba is initially compiled using the --with-lockdir option. +CLASS="PARAMETER" +>--with-lockdir option. This directory is by default /usr/local/samba/var/locks @@ -848,19 +847,18 @@ CLASS="FILENAME" >

VERSION

This man page is correct for version 2.2 of - the Samba suite. winbindd is however not available in - stable release of Samba as of yet.

This man page is correct for version 2.2 of + the Samba suite.

SEE ALSO

AUTHOR