| 1 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>wbinfo</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="wbinfo.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>wbinfo — Query information from winbind daemon</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">wbinfo</code> [-a user%password] [--all-domains] [--allocate-gid] [--allocate-uid] [-D domain] [--domain domain] [-g] [--getdcname domain] [--get-auth-user] [-G gid] [-h] [-i user] [-I ip] [-K user%password] [-m] [-n name] [-N netbios-name] [--own-domain] [-p] [-r user] [-s sid] [--separator] [--sequence] [--set-auth-user user%password] [-S sid] [-t] [-u] [--user-domgroups sid] [--user-sids sid] [-U uid] [-V] [-Y sid]</p></div></div><div class="refsect1" lang="en"><a name="id231532"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <span><strong class="command">wbinfo</strong></span> program queries and returns information |
|---|
| 2 | created and used by the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon. </p><p>The <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon must be configured |
|---|
| 3 | and running for the <span><strong class="command">wbinfo</strong></span> program to be able |
|---|
| 4 | to return information.</p></div><div class="refsect1" lang="en"><a name="id230532"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-a|--authenticate username%password</span></dt><dd><p>Attempt to authenticate a user via winbindd. |
|---|
| 5 | This checks both authenticaion methods and reports its results. |
|---|
| 6 | </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Do not be tempted to use this |
|---|
| 7 | functionality for authentication in third-party |
|---|
| 8 | applications. Instead use <a href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a>.</p></div></dd><dt><span class="term">--allocate-gid</span></dt><dd><p>Get a new GID out of idmap |
|---|
| 9 | </p></dd><dt><span class="term">--allocate-uid</span></dt><dd><p>Get a new UID out of idmap |
|---|
| 10 | </p></dd><dt><span class="term">--all-domains</span></dt><dd><p>List all domains (trusted and |
|---|
| 11 | own domain). |
|---|
| 12 | </p></dd><dt><span class="term">--domain name</span></dt><dd><p>This parameter sets the domain on which any specified |
|---|
| 13 | operations will performed. If special domain name '.' is used to represent |
|---|
| 14 | the current domain to which winbindd belongs. Currently only the |
|---|
| 15 | <code class="option">--sequence</code>, |
|---|
| 16 | <code class="option">-u</code>, and <code class="option">-g</code> options honor this parameter. |
|---|
| 17 | </p></dd><dt><span class="term">-D|--domain-info domain</span></dt><dd><p>Show most of the info we have about the domain. |
|---|
| 18 | </p></dd><dt><span class="term">-g|--domain-groups</span></dt><dd><p>This option will list all groups available |
|---|
| 19 | in the Windows NT domain for which the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> daemon is operating in. Groups in all trusted domains |
|---|
| 20 | will also be listed. Note that this operation does not assign |
|---|
| 21 | group ids to any groups that have not already been |
|---|
| 22 | seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>. </p></dd><dt><span class="term">--get-auth-user</span></dt><dd><p>Print username and password used by winbindd |
|---|
| 23 | during session setup to a domain controller. Username |
|---|
| 24 | and password can be set using <code class="option">--set-auth-user</code>. |
|---|
| 25 | Only available for root.</p></dd><dt><span class="term">--getdcname domain</span></dt><dd><p>Get the DC name for the specified domain. |
|---|
| 26 | </p></dd><dt><span class="term">-G|--gid-to-sid gid</span></dt><dd><p>Try to convert a UNIX group id to a Windows |
|---|
| 27 | NT SID. If the gid specified does not refer to one within |
|---|
| 28 | the idmap gid range then the operation will fail. </p></dd><dt><span class="term">-i|--user-info user</span></dt><dd><p>Get user info. |
|---|
| 29 | </p></dd><dt><span class="term">-I|--WINS-by-ip ip</span></dt><dd><p>The <em class="parameter"><code>-I</code></em> option |
|---|
| 30 | queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to send a node status |
|---|
| 31 | request to get the NetBIOS name associated with the IP address |
|---|
| 32 | specified by the <em class="parameter"><code>ip</code></em> parameter. |
|---|
| 33 | </p></dd><dt><span class="term">-K|--krb5auth username%password</span></dt><dd><p>Attempt to authenticate a user via Kerberos. |
|---|
| 34 | </p></dd><dt><span class="term">-m|--trusted-domains</span></dt><dd><p>Produce a list of domains trusted by the |
|---|
| 35 | Windows NT server <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> contacts |
|---|
| 36 | when resolving names. This list does not include the Windows |
|---|
| 37 | NT domain the server is a Primary Domain Controller for. |
|---|
| 38 | </p></dd><dt><span class="term">-n|--name-to-sid name</span></dt><dd><p>The <em class="parameter"><code>-n</code></em> option |
|---|
| 39 | queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> for the SID |
|---|
| 40 | associated with the name specified. Domain names can be specified |
|---|
| 41 | before the user name by using the winbind separator character. |
|---|
| 42 | For example CWDOM1/Administrator refers to the Administrator |
|---|
| 43 | user in the domain CWDOM1. If no domain is specified then the |
|---|
| 44 | domain used is the one specified in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> <em class="parameter"><code>workgroup |
|---|
| 45 | </code></em> parameter. </p></dd><dt><span class="term">-N|--WINS-by-name name</span></dt><dd><p>The <em class="parameter"><code>-N</code></em> option |
|---|
| 46 | queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to query the WINS |
|---|
| 47 | server for the IP address associated with the NetBIOS name |
|---|
| 48 | specified by the <em class="parameter"><code>name</code></em> parameter. |
|---|
| 49 | </p></dd><dt><span class="term">--own-domain</span></dt><dd><p>List own domain. |
|---|
| 50 | </p></dd><dt><span class="term">-p|--ping</span></dt><dd><p>Check whether winbindd is still alive. |
|---|
| 51 | Prints out either 'succeeded' or 'failed'. |
|---|
| 52 | </p></dd><dt><span class="term">-r|--user-groups username</span></dt><dd><p>Try to obtain the list of UNIX group ids |
|---|
| 53 | to which the user belongs. This only works for users |
|---|
| 54 | defined on a Domain Controller. |
|---|
| 55 | </p></dd><dt><span class="term">-s|--sid-to-name sid</span></dt><dd><p>Use <em class="parameter"><code>-s</code></em> to resolve |
|---|
| 56 | a SID to a name. This is the inverse of the <em class="parameter"><code>-n |
|---|
| 57 | </code></em> option above. SIDs must be specified as ASCII strings |
|---|
| 58 | in the traditional Microsoft format. For example, |
|---|
| 59 | S-1-5-21-1455342024-3071081365-2475485837-500. </p></dd><dt><span class="term">--separator</span></dt><dd><p>Get the active winbind separator. |
|---|
| 60 | </p></dd><dt><span class="term">--sequence</span></dt><dd><p>Show sequence numbers of |
|---|
| 61 | all known domains</p></dd><dt><span class="term">--set-auth-user username%password</span></dt><dd><p>Store username and password used by winbindd |
|---|
| 62 | during session setup to a domain controller. This enables |
|---|
| 63 | winbindd to operate in a Windows 2000 domain with Restrict |
|---|
| 64 | Anonymous turned on (a.k.a. Permissions compatiable with |
|---|
| 65 | Windows 2000 servers only). |
|---|
| 66 | </p></dd><dt><span class="term">-S|--sid-to-uid sid</span></dt><dd><p>Convert a SID to a UNIX user id. If the SID |
|---|
| 67 | does not correspond to a UNIX user mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then the operation will fail. </p></dd><dt><span class="term">-t|--check-secret</span></dt><dd><p>Verify that the workstation trust account |
|---|
| 68 | created when the Samba server is added to the Windows NT |
|---|
| 69 | domain is working. </p></dd><dt><span class="term">-u|--domain-users</span></dt><dd><p>This option will list all users available |
|---|
| 70 | in the Windows NT domain for which the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is operating in. Users in all trusted domains |
|---|
| 71 | will also be listed. Note that this operation does not assign |
|---|
| 72 | user ids to any users that have not already been seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> |
|---|
| 73 | .</p></dd><dt><span class="term">--user-domgroups SID</span></dt><dd><p>Get user domain groups. |
|---|
| 74 | </p></dd><dt><span class="term">--user-sids SID</span></dt><dd><p>Get user group SIDs for user. |
|---|
| 75 | </p></dd><dt><span class="term">-U|--uid-to-sid uid</span></dt><dd><p>Try to convert a UNIX user id to a Windows NT |
|---|
| 76 | SID. If the uid specified does not refer to one within |
|---|
| 77 | the idmap uid range then the operation will fail. </p></dd><dt><span class="term">-Y|--sid-to-gid sid</span></dt><dd><p>Convert a SID to a UNIX group id. If the SID |
|---|
| 78 | does not correspond to a UNIX group mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then |
|---|
| 79 | the operation will fail. </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. |
|---|
| 80 | </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. |
|---|
| 81 | </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id272184"></a><h2>EXIT STATUS</h2><p>The wbinfo program returns 0 if the operation |
|---|
| 82 | succeeded, or 1 if the operation failed. If the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is not working <span><strong class="command">wbinfo</strong></span> will always return |
|---|
| 83 | failure. </p></div><div class="refsect1" lang="en"><a name="id272210"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of |
|---|
| 84 | the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id272221"></a><h2>SEE ALSO</h2><p><a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> and <a href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a></p></div><div class="refsect1" lang="en"><a name="id272244"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities |
|---|
| 85 | were created by Andrew Tridgell. Samba is now developed |
|---|
| 86 | by the Samba Team as an Open Source project similar |
|---|
| 87 | to the way the Linux kernel is developed.</p><p><span><strong class="command">wbinfo</strong></span> and <span><strong class="command">winbindd</strong></span> |
|---|
| 88 | were written by Tim Potter.</p><p>The conversion to DocBook for Samba 2.2 was done |
|---|
| 89 | by Gerald Carter. The conversion to DocBook XML 4.2 for Samba |
|---|
| 90 | 3.0 was done by Alexander Bokovoy.</p></div></div></body></html> |
|---|
