1
<?xml version="1.0" encoding="iso-8859-1"?>
2
<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
3
<refentry id="idmap_nss.8">
6
<refentrytitle>idmap_nss</refentrytitle>
7
<manvolnum>8</manvolnum>
8
<refmiscinfo class="source">Samba</refmiscinfo>
9
<refmiscinfo class="manual">System Administration tools</refmiscinfo>
10
<refmiscinfo class="version">3.0</refmiscinfo>
15
<refname>idmap_nss</refname>
16
<refpurpose>Samba's idmap_nss Backend for Winbind</refpurpose>
20
<title>DESCRIPTION</title>
22
<para>The idmap_nss plugin provides a means to map Unix users and groups
23
to Windows accounts and obseletes the "winbind trusted domains only"
24
smb.conf option. This provides a simple means of ensuring that the SID
25
for a Unix user named jsmith is reported as the one assigned to
26
DOMAIN\jsmith which is necessary for reporting ACLs on files and printers
27
stored on a Samba member server.
32
<title>EXAMPLES</title>
35
This example shows how to use idmap_nss to check the local accounts for its
36
own domain while using allocation to create new mappings for trusted domains
41
idmap domains = SAMBA TRUSTEDDOMAINS
43
idmap config SAMBA:backend = nss
44
idmap config SAMBA:readonly = yes
46
idmap config TRUSTEDDOMAINS:default = yes
47
idmap config TRUSTEDDOMAINS:backend = tdb
48
idmap config TRUSTEDDOMAINS:range = 10000 - 50000
50
idmap alloc backend = tdb
51
idmap alloc config:range = 10000 - 50000
59
The original Samba software and related utilities
60
were created by Andrew Tridgell. Samba is now developed
61
by the Samba Team as an Open Source project similar
62
to the way the Linux kernel is developed.