summaryrefslogtreecommitdiffstats
path: root/docs-xml/manpages-3/idmap_nss.8.xml
blob: a7fdca033b1b27cd30b10a963ba227849bd9e924 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
<refentry id="idmap_nss.8">

<refmeta>
	<refentrytitle>idmap_nss</refentrytitle>
	<manvolnum>8</manvolnum>
	<refmiscinfo class="source">Samba</refmiscinfo>
	<refmiscinfo class="manual">System Administration tools</refmiscinfo>
	<refmiscinfo class="version">3.6</refmiscinfo>
</refmeta>


<refnamediv>
	<refname>idmap_nss</refname>
	<refpurpose>Samba's idmap_nss Backend for Winbind</refpurpose>
</refnamediv>

<refsynopsisdiv>
	<title>DESCRIPTION</title>

	<para>The idmap_nss plugin provides a means to map Unix users and groups
	to Windows accounts and obseletes the &quot;winbind trusted domains only&quot;
	smb.conf option.  This provides a simple means of ensuring that the SID
	for a Unix user named jsmith is reported as the one assigned to
	DOMAIN\jsmith which is necessary for reporting ACLs on files and printers
	stored on a Samba member server.
	</para>
</refsynopsisdiv>

<refsect1>
	<title>EXAMPLES</title>

	<para>
	This example shows how to use idmap_nss to check the local accounts for its
	own domain while using allocation to create new mappings for trusted domains
	</para>

	<programlisting>
	[global]
	idmap backend = tdb
	idmap uid = 1000000-1999999
	idmap gid = 1000000-1999999

	idmap config SAMBA : backend  = nss
	idmap config SAMBA : range = 1000-999999
	</programlisting>
</refsect1>

<refsect1>
	<title>AUTHOR</title>

	<para>
	The original Samba software and related utilities
	were created by Andrew Tridgell. Samba is now developed
	by the Samba Team as an Open Source project similar
	to the way the Linux kernel is developed.
	</para>
</refsect1>

</refentry>