update documentation.patch for 3.0.23d

git-svn-id: svn://svn.debian.org/svn/pkg-samba/trunk@1210 fc4039ab-9d04-0410-8cac-899223bdd6b0

1 files changed, 227 insertions, 173 deletions

diff --git a/patches/documentation.patch b/patches/documentation.patch
index 35c98fa47a..721799a9f1 100644
--- a/patches/documentation.patch
+++ b/patches/documentation.patch
@@ -1,209 +1,263 @@
-Index: samba-3.0.23c/docs/manpages/swat.8
+Index: samba-3.0.23d/docs/manpages/swat.8
 ===================================================================
---- samba-3.0.23c.orig/docs/manpages/swat.8	2006-09-02 10:08:48.900582525 +0200
-+++ samba-3.0.23c/docs/manpages/swat.8	2006-09-02 10:09:13.908784603 +0200
-@@ -81,51 +81,6 @@
- \-h|\-\-help
- Print a summary of command line options\&.
- 
+--- samba-3.0.23d.orig/docs/manpages/swat.8	2006-09-02 10:08:48.900582525 +0200
++++ samba-3.0.23d/docs/manpages/swat.8	2006-09-02 10:09:13.908784603 +0200
+@@ -95,63 +95,6 @@
+ .TP 3n
+ -h|--help
+ Print a summary of command line options.
 -.SH "INSTALLATION"
--
 -.PP
--Swat is included as binary package with most distributions\&. The package manager in this case takes care of the installation and configuration\&. This section is only for those who have compiled swat from scratch\&.
--
+-Swat is included as binary package with most distributions. The package manager in this case takes care of the installation and configuration. This section is only for those who have compiled swat from scratch.
 -.PP
--After you compile SWAT you need to run \fBmake install \fR to install the \fBswat\fR binary and the various help files and images\&. A default install would put these in:
--
--.TP 3
--\(bu
+-After you compile SWAT you need to run
+-\fBmake install \fR
+-to install the
+-\fBswat\fR
+-binary and the various help files and images. A default install would put these in:
+-.TP 3n
+-•
 -/usr/local/samba/sbin/swat
--.TP
--\(bu
+-.TP 3n
+-•
 -/usr/local/samba/swat/images/*
--.TP
--\(bu
+-.TP 3n
+-•
 -/usr/local/samba/swat/help/*
--.LP
--
+-.sp
+-.RE
 -.SS "Inetd Installation"
--
 -.PP
--You need to edit your \fI/etc/inetd\&.conf \fR and \fI/etc/services\fR to enable SWAT to be launched via \fBinetd\fR\&.
--
+-You need to edit your
+-\fI/etc/inetd.conf \fR
+-and
+-\fI/etc/services\fR
+-to enable SWAT to be launched via
+-\fBinetd\fR.
 -.PP
--In \fI/etc/services\fR you need to add a line like this:
--
+-In
+-\fI/etc/services\fR
+-you need to add a line like this:
 -.PP
 -\fBswat 901/tcp\fR
--
 -.PP
--Note for NIS/YP and LDAP users \- you may need to rebuild the NIS service maps rather than alter your local \fI /etc/services\fR file\&.
--
+-Note for NIS/YP and LDAP users - you may need to rebuild the NIS service maps rather than alter your local
+-\fI /etc/services\fR
+-file.
 -.PP
--the choice of port number isn't really important except that it should be less than 1024 and not currently used (using a number above 1024 presents an obscure security hole depending on the implementation details of your\fBinetd\fR daemon)\&.
--
+-the choice of port number isn't really important except that it should be less than 1024 and not currently used (using a number above 1024 presents an obscure security hole depending on the implementation details of your
+-\fBinetd\fR
+-daemon).
 -.PP
--In \fI/etc/inetd\&.conf\fR you should add a line like this:
--
+-In
+-\fI/etc/inetd.conf\fR
+-you should add a line like this:
 -.PP
--\fBswat stream tcp nowait\&.400 root /usr/local/samba/sbin/swat swat\fR
--
+-\fBswat stream tcp nowait.400 root /usr/local/samba/sbin/swat swat\fR
 -.PP
--Once you have edited \fI/etc/services\fR and \fI/etc/inetd\&.conf\fR you need to send a HUP signal to inetd\&. To do this use \fBkill \-1 PID \fR where PID is the process ID of the inetd daemon\&.
--
+-Once you have edited
+-\fI/etc/services\fR
+-and
+-\fI/etc/inetd.conf\fR
+-you need to send a HUP signal to inetd. To do this use
+-\fBkill -1 PID \fR
+-where PID is the process ID of the inetd daemon.
+-.\" end of SS subsection "Inetd Installation"
  .SH "LAUNCHING"
- 
  .PP
-@@ -145,8 +100,8 @@
- This file must contain a mapping of service name (e\&.g\&., swat) to service port (e\&.g\&., 901) and protocol type (e\&.g\&., tcp)\&.
- 
- .TP
--\fI/usr/local/samba/lib/smb\&.conf\fR
--This is the default location of the \fBsmb\&.conf\fR(5) server configuration file that swat edits\&. Other common places that systems install this file are \fI /usr/samba/lib/smb\&.conf\fR and \fI/etc/smb\&.conf \fR\&. This file describes all the services the server is to make available to clients\&.
-+\fI/etc/samba/smb\&.conf\fR
-+This is the default location of the \fBsmb\&.conf\fR(5) server configuration file that swat edits\&. This file describes all the services the server is to make available to clients\&.
- 
+ To launch SWAT just run your favorite web browser and point it at "http://localhost:901/".
+@@ -165,13 +108,10 @@
+ \fI/etc/services\fR
+ This file must contain a mapping of service name (e.g., swat) to service port (e.g., 901) and protocol type (e.g., tcp).
+ .TP 3n
+-\fI/usr/local/samba/lib/smb.conf\fR
++\fI/etc/samba/smb.conf\fR
+ This is the default location of the
+ \fBsmb.conf\fR(5)
+-server configuration file that swat edits. Other common places that systems install this file are
+-\fI /usr/samba/lib/smb.conf\fR
+-and
+-\fI/etc/smb.conf \fR. This file describes all the services the server is to make available to clients.
++server configuration file that swat edits. This file describes all the services the server is to make available to clients.
  .SH "WARNINGS"
- 
-Index: samba-3.0.23c/docs/manpages/nmbd.8
-===================================================================
---- samba-3.0.23c.orig/docs/manpages/nmbd.8	2006-09-02 10:08:48.928582751 +0200
-+++ samba-3.0.23c/docs/manpages/nmbd.8	2006-09-02 10:09:13.912784636 +0200
-@@ -74,7 +74,7 @@
- \-H <filename>
- NetBIOS lmhosts file\&. The lmhosts file is a list of NetBIOS names to IP addresses that is loaded by the nmbd server and used via the name resolution mechanism name resolve order described in \fBsmb\&.conf\fR(5) to resolve any NetBIOS name queries needed by the server\&. Note that the contents of this file are \fBNOT\fR used by \fBnmbd\fR to answer any name queries\&. Adding a line to this file affects name NetBIOS resolution from this host \fBONLY\fR\&.
- 
--The default path to this file is compiled into Samba as part of the build process\&. Common defaults are \fI/usr/local/samba/lib/lmhosts\fR,\fI/usr/samba/lib/lmhosts\fR or\fI/etc/samba/lmhosts\fR\&. See the \fBlmhosts\fR(5) man page for details on the contents of this file\&.
-+The default path to this file is \fI/etc/samba/lmhosts\fR\&. See the \fBlmhosts\fR(5) man page for details on the contents of this file\&.
- 
- .TP
- \-V
-@@ -119,8 +119,8 @@
- If running the server via the meta\-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios\-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&.
- 
- .TP
--\fI/usr/local/samba/lib/smb\&.conf\fR
--This is the default location of the \fBsmb\&.conf\fR(5) server configuration file\&. Other common places that systems install this file are \fI/usr/samba/lib/smb\&.conf\fR and \fI/etc/samba/smb\&.conf\fR\&.
-+\fI/etc/samba/smb\&.conf\fR
-+This is the default location of the \fBsmb\&.conf\fR(5) server configuration file\&.
- 
- When run as a WINS server (see thewins support parameter in the \fBsmb\&.conf\fR(5) man page),\fBnmbd\fR will store the WINS database in the file \fIwins\&.dat\fR in the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself\&.
- 
-@@ -132,7 +132,7 @@
- To shut down an \fBnmbd\fR process it is recommended that SIGKILL (\-9) \fBNOT\fR be used, except as a last resort, as this may leave the name database in an inconsistent state\&. The correct way to terminate \fBnmbd\fR is to send it a SIGTERM (\-15) signal and wait for it to die on its own\&.
- 
  .PP
--\fBnmbd\fR will accept SIGHUP, which will cause it to dump out its namelists into the file \fInamelist\&.debug \fR in the \fI/usr/local/samba/var/locks\fR directory (or the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself)\&. This will also cause \fBnmbd\fR to dump out its server database in the \fIlog\&.nmb\fR file\&.
-+\fBnmbd\fR will accept SIGHUP, which will cause it to dump out its namelists into the file \fInamelist\&.debug \fR in the \fI/var/run/samba\fR directory (or the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself)\&. This will also cause \fBnmbd\fR to dump out its server database in the \fIlog\&.nmb\fR file\&.
+ \fBswat\fR
  
- .PP
- The debug log level of nmbd may be raised or lowered using \fBsmbcontrol\fR(1) (SIGUSR[1|2] signals are no longer used since Samba 2\&.2)\&. This is to allow transient problems to be diagnosed, whilst still running at a normally low log level\&.
-Index: samba-3.0.23c/docs/manpages/smbd.8
+Index: samba-3.0.23d/docs/manpages/nmbd.8
 ===================================================================
---- samba-3.0.23c.orig/docs/manpages/smbd.8	2006-09-02 10:08:48.956582977 +0200
-+++ samba-3.0.23c/docs/manpages/smbd.8	2006-09-02 10:09:13.912784636 +0200
-@@ -119,8 +119,8 @@
- If running the server via the meta\-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios\-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&.
- 
- .TP
--\fI/usr/local/samba/lib/smb\&.conf\fR
--This is the default location of the \fBsmb\&.conf\fR(5) server configuration file\&. Other common places that systems install this file are \fI/usr/samba/lib/smb\&.conf\fR and \fI/etc/samba/smb\&.conf\fR\&.
-+\fI/etc/samba/smb\&.conf\fR
-+This is the default location of the \fBsmb\&.conf\fR(5) server configuration file\&.
- 
- This file describes all the services the server is to make available to clients\&. See \fBsmb\&.conf\fR(5) for more information\&.
- 
-Index: samba-3.0.23c/docs/manpages/lmhosts.5
+--- samba-3.0.23d.orig/docs/manpages/nmbd.8	2006-09-02 10:08:48.928582751 +0200
++++ samba-3.0.23d/docs/manpages/nmbd.8	2006-09-02 10:09:13.912784636 +0200
+@@ -102,11 +102,7 @@
+ to answer any name queries. Adding a line to this file affects name NetBIOS resolution from this host
+ \fBONLY\fR.
+ .sp
+-The default path to this file is compiled into Samba as part of the build process. Common defaults are
+-\fI/usr/local/samba/lib/lmhosts\fR,
+-\fI/usr/samba/lib/lmhosts\fR
+-or
+-\fI/etc/samba/lmhosts\fR. See the
++The default path to this file is \fI/etc/samba/lmhosts\fR. See the
+ \fBlmhosts\fR(5)
+ man page for details on the contents of this file.
+ .TP 3n
+@@ -157,13 +153,10 @@
+ If running the server via the meta-daemon
+ \fBinetd\fR, this file must contain a mapping of service name (e.g., netbios-ssn) to service port (e.g., 139) and protocol type (e.g., tcp).
+ .TP 3n
+-\fI/usr/local/samba/lib/smb.conf\fR
++\fI/etc/samba/smb.conf\fR
+ This is the default location of the
+ \fBsmb.conf\fR(5)
+-server configuration file. Other common places that systems install this file are
+-\fI/usr/samba/lib/smb.conf\fR
+-and
+-\fI/etc/samba/smb.conf\fR.
++server configuration file.
+ .sp
+ When run as a WINS server (see the
+ wins support parameter in the
+@@ -204,10 +197,8 @@
+ will accept SIGHUP, which will cause it to dump out its namelists into the file
+ \fInamelist.debug \fR
+ in the
+-\fI/usr/local/samba/var/locks\fR
+-directory (or the
+-\fIvar/locks\fR
+-directory configured under wherever Samba was configured to install itself). This will also cause
++\fI/var/run/samba\fR
++directory. This will also cause
+ \fBnmbd\fR
+ to dump out its server database in the
+ \fIlog.nmb\fR
+Index: samba-3.0.23d/docs/manpages/smbd.8
+===================================================================
+--- samba-3.0.23d.orig/docs/manpages/smbd.8	2006-09-02 10:08:48.956582977 +0200
++++ samba-3.0.23d/docs/manpages/smbd.8	2006-09-02 10:09:13.912784636 +0200
+@@ -134,13 +134,10 @@
+ If running the server via the meta-daemon
+ \fBinetd\fR, this file must contain a mapping of service name (e.g., netbios-ssn) to service port (e.g., 139) and protocol type (e.g., tcp).
+ .TP 3n
+-\fI/usr/local/samba/lib/smb.conf\fR
++\fI/etc/samba/smb.conf\fR
+ This is the default location of the
+ \fBsmb.conf\fR(5)
+-server configuration file. Other common places that systems install this file are
+-\fI/usr/samba/lib/smb.conf\fR
+-and
+-\fI/etc/samba/smb.conf\fR.
++server configuration file.
+ .sp
+ This file describes all the services the server is to make available to clients. See
+ \fBsmb.conf\fR(5)
+Index: samba-3.0.23d/docs/manpages/lmhosts.5
 ===================================================================
---- samba-3.0.23c.orig/docs/manpages/lmhosts.5	2006-09-02 10:08:48.988583236 +0200
-+++ samba-3.0.23c/docs/manpages/lmhosts.5	2006-09-02 10:09:13.912784636 +0200
-@@ -73,7 +73,7 @@
+--- samba-3.0.23d.orig/docs/manpages/lmhosts.5	2006-09-02 10:08:48.988583236 +0200
++++ samba-3.0.23d/docs/manpages/lmhosts.5	2006-09-02 10:09:13.912784636 +0200
+@@ -77,10 +77,8 @@
+ file.
  .SH "FILES"
- 
  .PP
--lmhosts is loaded from the configuration directory\&. This is usually \fI/etc/samba\fR or \fI/usr/local/samba/lib\fR\&.
-+lmhosts is loaded from the configuration directory\&. This is \fI/etc/samba\fR\&.
- 
+-lmhosts is loaded from the configuration directory. This is usually
+-\fI/etc/samba\fR
+-or
+-\fI/usr/local/samba/lib\fR.
++lmhosts is loaded from the configuration directory. This is
++\fI/etc/samba\fR.
  .SH "VERSION"
- 
-Index: samba-3.0.23c/docs/manpages/ntlm_auth.1
-===================================================================
---- samba-3.0.23c.orig/docs/manpages/ntlm_auth.1	2006-09-02 10:08:49.016583462 +0200
-+++ samba-3.0.23c/docs/manpages/ntlm_auth.1	2006-09-02 10:09:13.916784668 +0200
-@@ -42,7 +42,7 @@
- The \fBwinbindd\fR(8) daemon must be operational for many of these commands to function\&.
- 
  .PP
--Some of these commands also require access to the directory \fIwinbindd_privileged\fR in \fI$LOCKDIR\fR\&. This should be done either by running this command as root or providing group access to the \fIwinbindd_privileged\fR directory\&. For security reasons, this directory should not be world\-accessable\&.
-+Some of these commands also require access to the directory \fIwinbindd_privileged\fR in \fI/var/run/samba\fR\&. This should be done either by running this command as root or providing group access to the \fIwinbindd_privileged\fR directory\&. For security reasons, this directory should not be world\-accessable\&.
- 
+ This man page is correct for version 3.0 of the Samba suite.
+Index: samba-3.0.23d/docs/manpages/ntlm_auth.1
+===================================================================
+--- samba-3.0.23d.orig/docs/manpages/ntlm_auth.1	2006-09-02 10:08:49.016583462 +0200
++++ samba-3.0.23d/docs/manpages/ntlm_auth.1	2006-09-02 10:09:13.916784668 +0200
+@@ -43,7 +43,7 @@
+ Some of these commands also require access to the directory
+ \fIwinbindd_privileged\fR
+ in
+-\fI$LOCKDIR\fR. This should be done either by running this command as root or providing group access to the
++\fI/var/run/samba\fR. This should be done either by running this command as root or providing group access to the
+ \fIwinbindd_privileged\fR
+ directory. For security reasons, this directory should not be world-accessable.
  .SH "OPTIONS"
- 
 @@ -64,7 +64,7 @@
- squid\-2\&.5\-ntlmssp
- Server\-side helper for use with Squid 2\&.5's NTLMSSP authentication\&.
- 
--Requires access to the directory \fIwinbindd_privileged\fR in\fI$LOCKDIR\fR\&. The protocol used is described here: http://devel\&.squid\-cache\&.org/ntlm/squid_helper_protocol\&.html\&. This protocol has been extended to allow the NTLMSSP Negotiate packet to be included as an argument to the \fBYR\fR command\&. (Thus avoiding loss of information in the protocol exchange)\&.
-+Requires access to the directory \fIwinbindd_privileged\fR in \fI/var/run/samba\fR\&. The protocol used is described here: http://devel\&.squid\-cache\&.org/ntlm/squid_helper_protocol\&.html\&. This protocol has been extended to allow the NTLMSSP Negotiate packet to be included as an argument to the \fBYR\fR command\&. (Thus avoiding loss of information in the protocol exchange)\&.
- 
- .TP
- ntlmssp\-client\-1
-@@ -76,7 +76,7 @@
- gss\-spnego
- Server\-side helper that implements GSS\-SPNEGO\&. This uses a protocol that is almost the same as\fBsquid\-2\&.5\-ntlmssp\fR, but has some subtle differences that are undocumented outside the source at this stage\&.
- 
--Requires access to the directory \fIwinbindd_privileged\fR in\fI$LOCKDIR\fR\&.
-+Requires access to the directory \fIwinbindd_privileged\fR in \fI/var/run/samba\fR\&.
- 
- .TP
- gss\-spnego\-client
-Index: samba-3.0.23c/docs/manpages/tdbbackup.8
+ Requires access to the directory
+ \fIwinbindd_privileged\fR
+ in
+-\fI$LOCKDIR\fR. The protocol used is described here:
++\fI/var/run/samba\fR. The protocol used is described here:
+ http://devel.squid-cache.org/ntlm/squid_helper_protocol.html. This protocol has been extended to allow the NTLMSSP Negotiate packet to be included as an argument to the
+ \fBYR\fR
+ command. (Thus avoiding loss of information in the protocol exchange).
+@@ -83,7 +83,7 @@
+ Requires access to the directory
+ \fIwinbindd_privileged\fR
+ in
+-\fI$LOCKDIR\fR.
++\fI/var/run/samba\fR.
+ .TP 3n
+ gss-spnego-client
+ Client-side helper that implements GSS-SPNEGO. This also uses a protocol similar to the above helpers, but is currently undocumented.
+Index: samba-3.0.23d/docs/manpages/tdbbackup.8
 ===================================================================
---- samba-3.0.23c.orig/docs/manpages/tdbbackup.8	2006-09-02 10:08:49.044583688 +0200
-+++ samba-3.0.23c/docs/manpages/tdbbackup.8	2006-09-02 10:09:13.916784668 +0200
-@@ -72,13 +72,13 @@
- 
- .TP 3
- \(bu
--\fBsecrets\&.tdb\fR \- usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba\&.
-+\fBsecrets\&.tdb\fR \- in the /var/lib/samba directory\&.
- .TP
- \(bu
--\fBpassdb\&.tdb\fR \- usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba\&.
-+\fBpassdb\&.tdb\fR \- in the /var/lib/samba directory\&.
- .TP
- \(bu
--\fB*\&.tdb\fR located in the /usr/local/samba/var directory or on some systems in the /var/cache or /var/lib/samba directories\&.
-+\fB*\&.tdb\fR located in the /var/lib/samba and /var/run/samba directories\&.
- .LP
- 
+--- samba-3.0.23d.orig/docs/manpages/tdbbackup.8	2006-09-02 10:08:49.044583688 +0200
++++ samba-3.0.23d/docs/manpages/tdbbackup.8	2006-09-02 10:09:13.916784668 +0200
+@@ -64,17 +64,17 @@
+ &#8226;
+
+ \fBsecrets.tdb\fR
+-- usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba.
++- in the /var/lib/samba directory.
+ .TP 3n
+ &#8226;
+
+ \fBpassdb.tdb\fR
+-- usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba.
++- in the /var/lib/samba directory.
+ .TP 3n
+ &#8226;
+
+ \fB*.tdb\fR
+-located in the /usr/local/samba/var directory or on some systems in the /var/cache or /var/lib/samba directories.
++located in the /var/lib/samba and /var/run/samba directories.
  .SH "VERSION"
-Index: samba-3.0.23c/docs/manpages/winbindd.8
+ .PP
+ This man page is correct for version 3.0 of the Samba suite.
+Index: samba-3.0.23d/docs/manpages/winbindd.8
 ===================================================================
---- samba-3.0.23c.orig/docs/manpages/winbindd.8	2006-09-02 10:08:49.084584012 +0200
-+++ samba-3.0.23c/docs/manpages/winbindd.8	2006-09-02 10:09:13.916784668 +0200
-@@ -298,19 +298,19 @@
- The UNIX pipe over which clients communicate with the \fBwinbindd\fR program\&. For security reasons, the winbind client will only attempt to connect to the winbindd daemon if both the \fI/tmp/\&.winbindd\fR directory and \fI/tmp/\&.winbindd/pipe\fR file are owned by root\&.
- 
- .TP
+--- samba-3.0.23d.orig/docs/manpages/winbindd.8	2006-09-02 10:08:49.084584012 +0200
++++ samba-3.0.23d/docs/manpages/winbindd.8	2006-09-02 10:09:13.916784668 +0200
+@@ -390,27 +390,24 @@
+ \fI/tmp/.winbindd/pipe\fR
+ file are owned by root.
+ .TP 3n
 -$LOCKDIR/winbindd_privileged/pipe
--The UNIX pipe over which 'privileged' clients communicate with the \fBwinbindd\fR program\&. For security reasons, access to some winbindd functions \- like those needed by the \fBntlm_auth\fR utility \- is restricted\&. By default, only users in the 'root' group will get this access, however the administrator may change the group permissions on $LOCKDIR/winbindd_privileged to allow programs like 'squid' to use ntlm_auth\&. Note that the winbind client will only attempt to connect to the winbindd daemon if both the \fI$LOCKDIR/winbindd_privileged\fR directory and \fI$LOCKDIR/winbindd_privileged/pipe\fR file are owned by root\&.
 +/var/run/samba/winbindd_privileged/pipe
-+The UNIX pipe over which 'privileged' clients communicate with the \fBwinbindd\fR program\&. For security reasons, access to some winbindd functions \- like those needed by the \fBntlm_auth\fR utility \- is restricted\&. By default, only users in the 'root' group will get this access, however the administrator may change the group permissions on /var/run/samba/winbindd_privileged to allow programs like 'squid' to use ntlm_auth\&. Note that the winbind client will only attempt to connect to the winbindd daemon if both the \fI/var/run/samba/winbindd_privileged\fR directory and \fI/var/run/samba/winbindd_privileged/pipe\fR file are owned by root\&.
- 
- .TP
- /lib/libnss_winbind\&.so\&.X
- Implementation of name service switch library\&.
- 
- .TP
--$LOCKDIR/winbindd_idmap\&.tdb
--Storage for the Windows NT rid to UNIX user/group id mapping\&. The lock directory is specified when Samba is initially compiled using the \fI\-\-with\-lockdir\fR option\&. This directory is by default \fI/usr/local/samba/var/locks \fR\&.
-+/var/run/samba/winbindd_idmap\&.tdb
-+Storage for the Windows NT rid to UNIX user/group id mapping\&.
- 
- .TP
--$LOCKDIR/winbindd_cache\&.tdb
-+/var/run/samba/winbindd_cache\&.tdb
- Storage for cached user and group information\&.
- 
+ The UNIX pipe over which 'privileged' clients communicate with the
+ \fBwinbindd\fR
+ program. For security reasons, access to some winbindd functions - like those needed by the
+ \fBntlm_auth\fR
+-utility - is restricted. By default, only users in the 'root' group will get this access, however the administrator may change the group permissions on $LOCKDIR/winbindd_privileged to allow programs like 'squid' to use ntlm_auth. Note that the winbind client will only attempt to connect to the winbindd daemon if both the
+-\fI$LOCKDIR/winbindd_privileged\fR
++utility - is restricted. By default, only users in the 'root' group will get this access, however the administrator may change the group permissions on /var/run/samba/winbindd_privileged to allow programs like 'squid' to use ntlm_auth. Note that the winbind client will only attempt to connect to the winbindd daemon if both the
++\fI/var/run/samba/winbindd_privileged\fR
+ directory and
+-\fI$LOCKDIR/winbindd_privileged/pipe\fR
++\fI/var/run/samba/winbindd_privileged/pipe\fR
+ file are owned by root.
+ .TP 3n
+ /lib/libnss_winbind.so.X
+ Implementation of name service switch library.
+ .TP 3n
+-$LOCKDIR/winbindd_idmap.tdb
+-Storage for the Windows NT rid to UNIX user/group id mapping. The lock directory is specified when Samba is initially compiled using the
+-\fI--with-lockdir\fR
+-option. This directory is by default
+-\fI/usr/local/samba/var/locks \fR.
++/var/run/samba/winbindd_idmap.tdb
++Storage for the Windows NT rid to UNIX user/group id mapping.
+ .TP 3n
+-$LOCKDIR/winbindd_cache.tdb
++/var/run/samba/winbindd_cache.tdb
+ Storage for cached user and group information.
  .SH "VERSION"
+ .PP