diff options
Diffstat (limited to 'docs/htmldocs/manpages/idmap_rid.8.html')
| -rw-r--r-- | docs/htmldocs/manpages/idmap_rid.8.html | 27 |
1 files changed, 20 insertions, 7 deletions
diff --git a/docs/htmldocs/manpages/idmap_rid.8.html b/docs/htmldocs/manpages/idmap_rid.8.html index 987fa9c425..0458d78af2 100644 --- a/docs/htmldocs/manpages/idmap_rid.8.html +++ b/docs/htmldocs/manpages/idmap_rid.8.html @@ -1,6 +1,20 @@ <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>idmap_rid</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="idmap_rid"><a name="idmap_rid.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>idmap_rid — Samba's idmap_rid Backend for Winbind</p></div><div class="refsynopsisdiv" title="DESCRIPTION"><h2>DESCRIPTION</h2><p>The idmap_rid backend provides a way to use an algorithmic mapping scheme to map UIDs/GIDs and SIDs. No database is required - in this case as the mapping is deterministic.</p></div><div class="refsect1" title="IDMAP OPTIONS"><a name="id266338"></a><h2>IDMAP OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">range = low - high</span></dt><dd><p> + in this case as the mapping is deterministic.</p><p> + Note that the idmap_rid module has changed considerably since Samba + versions 3.0. and 3.2. + Currently, there should to be an explicit idmap configuration for each + domain that should use the idmap_rid backend, using disjoint ranges. + One usually needs to define a writeable default idmap range, using + a backent like <em class="parameter"><code>tdb</code></em> or <em class="parameter"><code>ldap</code></em> + that can create unix ids, in order to be able to map the BUILTIN sids + and other domains, and also in order to be able to create group mappings. + See the example below. + </p><p> + Note that the old syntax + <em class="parameter"><code>idmap backend = rid:"DOM1=range DOM2=range2 ..."</code></em> + is not supported any more since Samba version 3.0.25. + </p></div><div class="refsect1" title="IDMAP OPTIONS"><a name="id266822"></a><h2>IDMAP OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">range = low - high</span></dt><dd><p> Defines the available matching uid and gid range for which the backend is authoritative. Note that the range acts as a filter. If algorithmically determined UID or GID fall outside the @@ -17,7 +31,7 @@ RIDs by default start at 1000 (512 hexadecimal). </p><p> Use of this parameter is deprecated. - </p></dd></dl></div></div><div class="refsect1" title="THE MAPPING FORMULAS"><a name="id266835"></a><h2>THE MAPPING FORMULAS</h2><p> + </p></dd></dl></div></div><div class="refsect1" title="THE MAPPING FORMULAS"><a name="id266864"></a><h2>THE MAPPING FORMULAS</h2><p> The Unix ID for a RID is calculated this way: </p><pre class="programlisting"> ID = RID - BASE_RID + LOW_RANGE_ID. @@ -28,7 +42,7 @@ </p><pre class="programlisting"> RID = ID + BASE_RID - LOW_RANGE_ID. </pre><p> - </p></div><div class="refsect1" title="EXAMPLES"><a name="id266860"></a><h2>EXAMPLES</h2><p> + </p></div><div class="refsect1" title="EXAMPLES"><a name="id266889"></a><h2>EXAMPLES</h2><p> This example shows how to configure two domains with idmap_rid, the principal domain and a trusted domain, leaving the default id mapping scheme at tdb. The example also demonstrates the use @@ -38,9 +52,8 @@ security = domain workgroup = MAIN - idmap backend = tdb - idmap uid = 1000000-1999999 - idmap gid = 1000000-1999999 + idmap config * : backend = tdb + idmap config * : range = 1000000-1999999 idmap config MAIN : backend = rid idmap config MAIN : range = 10000 - 49999 @@ -48,7 +61,7 @@ idmap config TRUSTED : backend = rid idmap config TRUSTED : range = 50000 - 99999 idmap config TRUSTED : base_rid = 1000 - </pre></div><div class="refsect1" title="AUTHOR"><a name="id266881"></a><h2>AUTHOR</h2><p> + </pre></div><div class="refsect1" title="AUTHOR"><a name="id265706"></a><h2>AUTHOR</h2><p> The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar |