Ignore:
Timestamp:
Mar 25, 2007, 3:18:51 PM (14 years ago)
Author:
Yuri Dario
Message:

Source code upgrade to 3.0.25pre2.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/samba/docs/htmldocs/manpages/winbindd.8.html

    r1 r22  
    44        in most modern C libraries, to arbitary applications via PAM
    55        and <span><strong class="command">ntlm_auth</strong></span> and to Samba itself.</p><p>Even if winbind is not used for nsswitch, it still provides a
    6     service to <span><strong class="command">smbd</strong></span>, <span><strong class="command">ntlm_auth</strong></span>
    7     and the <span><strong class="command">pam_winbind.so</strong></span> PAM module, by managing connections to
    8     domain controllers.  In this configuraiton the
    9     <a class="indexterm" name="id231194"></a>idmap uid and
    10     <a class="indexterm" name="id231201"></a>idmap gid
    11     parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user
     6        service to <span><strong class="command">smbd</strong></span>, <span><strong class="command">ntlm_auth</strong></span>
     7        and the <span><strong class="command">pam_winbind.so</strong></span> PAM module, by managing connections to
     8        domain controllers.  In this configuraiton the
     9        <a class="indexterm" name="id231194"></a>idmap uid and
     10        <a class="indexterm" name="id231201"></a>idmap gid
     11        parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user
    1212        and system information to be obtained from different databases
    1313        services such as NIS or DNS.  The exact behaviour can be configured
     
    8585use only by developers and generate HUGE amounts of log
    8686data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
    87 override the <a class="indexterm" name="id271776"></a> parameter
     87override the <a class="indexterm" name="id271775"></a> parameter
    8888in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension
    8989<code class="constant">".progname"</code> will be appended (e.g. log.smbclient,
     
    116116        users and groups will be mapped as soon as a client performs a user
    117117        or group enumeration command.  The allocated unix ids are stored
    118         in a database file under the Samba lock directory and will be
    119         remembered. </p><p>WARNING: The SID to unix id database is the only location
     118        in a database and will be remembered. </p><p>WARNING: The SID to unix id database is the only location
    120119        where the user and group mappings are stored by winbindd.  If this
    121         file is deleted or corrupted, there is no way for winbindd to
     120        store is deleted or corrupted, there is no way for winbindd to
    122121        determine which user and group ids correspond to Windows NT user
    123         and group rids. </p><p>See the <a class="indexterm" name="id271915"></a> parameter in
     122        and group rids. </p><p>See the <a class="indexterm" name="id271914"></a> or the old <a class="indexterm" name="id271920"></a> parameters in
    124123        <code class="filename">smb.conf</code> for options for sharing this
    125         database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id271929"></a><h2>CONFIGURATION</h2><p>Configuration of the <span><strong class="command">winbindd</strong></span> daemon
     124        database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id271934"></a><h2>CONFIGURATION</h2><p>Configuration of the <span><strong class="command">winbindd</strong></span> daemon
    126125        is done through configuration parameters in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file.  All parameters should be specified in the
    127126        [global] section of smb.conf. </p><div class="itemizedlist"><ul type="disc"><li><p>
    128                 <a class="indexterm" name="id271959"></a>winbind separator</p></li><li><p>
    129                 <a class="indexterm" name="id271971"></a>idmap uid</p></li><li><p>
    130                 <a class="indexterm" name="id271982"></a>idmap gid</p></li><li><p>
    131                 <a class="indexterm" name="id271993"></a>idmap backend</p></li><li><p>
    132                 <a class="indexterm" name="id272005"></a>winbind cache time</p></li><li><p>
    133                 <a class="indexterm" name="id272016"></a>winbind enum users</p></li><li><p>
    134                 <a class="indexterm" name="id272027"></a>winbind enum groups</p></li><li><p>
    135                 <a class="indexterm" name="id272039"></a>template homedir</p></li><li><p>
    136                 <a class="indexterm" name="id272050"></a>template shell</p></li><li><p>
    137                 <a class="indexterm" name="id272061"></a>winbind use default domain</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id272072"></a><h2>EXAMPLE SETUP</h2><p>
     127                <a class="indexterm" name="id271964"></a>winbind separator</p></li><li><p>
     128                <a class="indexterm" name="id271976"></a>idmap uid</p></li><li><p>
     129                <a class="indexterm" name="id271987"></a>idmap gid</p></li><li><p>
     130                <a class="indexterm" name="id271998"></a>idmap backend</p></li><li><p>
     131                <a class="indexterm" name="id272010"></a>winbind cache time</p></li><li><p>
     132                <a class="indexterm" name="id272021"></a>winbind enum users</p></li><li><p>
     133                <a class="indexterm" name="id272032"></a>winbind enum groups</p></li><li><p>
     134                <a class="indexterm" name="id272044"></a>template homedir</p></li><li><p>
     135                <a class="indexterm" name="id272055"></a>template shell</p></li><li><p>
     136                <a class="indexterm" name="id272066"></a>winbind use default domain</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id272077"></a><h2>EXAMPLE SETUP</h2><p>
    138137        To setup winbindd for user and group lookups plus
    139138        authentication from a domain controller use something like the
     
    186185        the DOMAIN+user syntax for the username. You may wish to use the
    187186        commands <span><strong class="command">getent passwd</strong></span> and <span><strong class="command">getent group
    188         </strong></span> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id272263"></a><h2>NOTES</h2><p>The following notes are useful when configuring and
     187        </strong></span> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id272268"></a><h2>NOTES</h2><p>The following notes are useful when configuring and
    189188        running <span><strong class="command">winbindd</strong></span>: </p><p><a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine
    190189        for <span><strong class="command">winbindd</strong></span> to work. </p><p>PAM is really easy to misconfigure.  Make sure you know what
     
    193192        then in general the user and groups ids allocated by winbindd will not
    194193        be the same.  The user and group ids will only be valid for the local
    195         machine, unless a shared <a class="indexterm" name="id272310"></a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping
    196         file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id272322"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the
     194        machine, unless a shared <a class="indexterm" name="id272315"></a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping
     195        file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id272327"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the
    197196        <span><strong class="command">winbindd</strong></span> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and
    198197                apply any parameter changes to the running
     
    202201                winbindd</strong></span> to write status information to the winbind
    203202                log file.</p><p>Log files are stored in the filename specified by the
    204                 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id272385"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with
     203                log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id272390"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with
    205204                the <span><strong class="command">winbindd</strong></span> program.  For security reasons, the
    206205                winbind client will only attempt to connect to the winbindd daemon
     
    223222                This directory is by default <code class="filename">/usr/local/samba/var/locks
    224223                </code>. </p></dd><dt><span class="term">$LOCKDIR/winbindd_cache.tdb</span></dt><dd><p>Storage for cached user and group information.
    225                 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id272529"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of
    226         the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id272540"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id272597"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
     224                </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id272534"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of
     225        the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id272545"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id272602"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
    227226        were created by Andrew Tridgell. Samba is now developed
    228227        by the Samba Team as an Open Source project similar
Note: See TracChangeset for help on using the changeset viewer.