source: vendor/current/docs/manpages/winbindd.8@ 989

'\" t
.\"     Title: winbindd
.\"    Author: [see the "AUTHOR" section]
.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
.\"      Date: 10/25/2016
.\"    Manual: System Administration tools
.\"    Source: Samba 4.4
.\"  Language: English
.\"
.TH "WINBINDD" "8" "10/25/2016" "Samba 4\&.4" "System Administration tools"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
winbindd \- Name Service Switch daemon for resolving names from NT servers
.SH "SYNOPSIS"
.HP \w'\ 'u
winbindd [\-D|\-\-daemon] [\-F|\-\-foreground] [\-S|\-\-stdout] [\-i|\-\-interactive] [\-d\ <debug\ level>] [\-s\ <smb\ config\ file>] [\-n|\-\-no\-caching] [\-\-no\-process\-group]
.SH "DESCRIPTION"
.PP
This program is part of the
\fBsamba\fR(7)
suite\&.
.PP
winbindd
is a daemon that provides a number of services to the Name Service Switch capability found in most modern C libraries, to arbitrary applications via PAM and
ntlm_auth
and to Samba itself\&.
.PP
Even if winbind is not used for nsswitch, it still provides a service to
smbd,
ntlm_auth
and the
pam_winbind\&.so
PAM module, by managing connections to domain controllers\&. In this configuration the
\m[blue]\fBidmap config * : range\fR\m[]
parameter is not required\&. (This is known as `netlogon proxy only mode\*(Aq\&.)
.PP
The Name Service Switch allows user and system information to be obtained from different databases services such as NIS or DNS\&. The exact behaviour can be configured through the
/etc/nsswitch\&.conf
file\&. Users and groups are allocated as they are resolved to a range of user and group ids specified by the administrator of the Samba system\&.
.PP
The service provided by
winbindd
is called `winbind\*(Aq and can be used to resolve user and group information from a Windows NT server\&. The service can also provide authentication services via an associated PAM module\&.
.PP
The
pam_winbind
module supports the
\fIauth\fR,
\fIaccount\fR
and
\fIpassword\fR
module\-types\&. It should be noted that the
\fIaccount\fR
module simply performs a getpwnam() to verify that the system can obtain a uid for the user, as the domain controller has already performed access control\&. If the
libnss_winbind
library has been correctly installed, or an alternate source of names configured, this should always succeed\&.
.PP
The following nsswitch databases are implemented by the winbindd service:
.PP
hosts
.RS 4
This feature is only available on IRIX\&. User information traditionally stored in the
hosts(5)
file and used by
gethostbyname(3)
functions\&. Names are resolved through the WINS server or by broadcast\&.
.RE
.PP
passwd
.RS 4
User information traditionally stored in the
passwd(5)
file and used by
getpwent(3)
functions\&.
.RE
.PP
group
.RS 4
Group information traditionally stored in the
group(5)
file and used by
getgrent(3)
functions\&.
.RE
.PP
For example, the following simple configuration in the
/etc/nsswitch\&.conf
file can be used to initially resolve user and group information from
/etc/passwd
and
/etc/group
and then from the Windows NT server\&.
.sp
.if n \{\
.RS 4
.\}
.nf
passwd:         files winbind
group:          files winbind
## only available on IRIX: use winbind to resolve hosts:
# hosts:        files dns winbind
## All other NSS enabled systems should use libnss_wins\&.so like this:
hosts:          files dns wins

.fi
.if n \{\
.RE
.\}
.PP
The following simple configuration in the
/etc/nsswitch\&.conf
file can be used to initially resolve hostnames from
/etc/hosts
and then from the WINS server\&.
.sp
.if n \{\
.RS 4
.\}
.nf
hosts:          files wins
.fi
.if n \{\
.RE
.\}
.SH "OPTIONS"
.PP
\-D|\-\-daemon
.RS 4
If specified, this parameter causes the server to operate as a daemon\&. That is, it detaches itself and runs in the background on the appropriate port\&. This switch is assumed if