Changeset 745 for trunk/server/docs/htmldocs/manpages/idmap_ad.8.html

Timestamp:

Nov 27, 2012, 4:43:17 PM (13 years ago)

Author:

Silvan Scherrer

Message:

Samba Server: updated trunk to 3.6.0

Location:

trunk/server

Files:

• . (modified) (1 prop)
• docs/htmldocs/manpages/idmap_ad.8.html (modified) (3 diffs)

trunk/server/docs/htmldocs/manpages/idmap_ad.8.html

@@ -5 +5 @@
         by the administrator by adding the posixAccount/posixGroup
         classes and relative attribute/value pairs to the user and
-        group objects in the AD.</p></div><div class="refsect1" title="IDMAP OPTIONS"><a name="id266339"></a><h2>IDMAP OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">range = low - high</span></dt><dd><p>
+        group objects in the AD.</p><p>
+        Note that the idmap_ad module has changed considerably since
+        Samba versions 3.0 and 3.2.
+        Currently, the <em class="parameter"><code>ad</code></em> backend
+        does not work as the the default idmap backend, but one has
+        to configure it separately for each domain for which one wants
+        to use it, using disjoint ranges. One usually needs to configure
+        a writeable default idmap range, using for example the
+        <em class="parameter"><code>tdb</code></em> or <em class="parameter"><code>ldap</code></em>)
+        backend, in order to be able to map the BUILTIN sids and
+        possibly other trusted domains. The writeable default config
+        is also needed in order to be able to create group mappings.
+        This catch-all default idmap configuration should have a range
+        that is disjoint from any explicitly configured domain with
+        idmap backend <em class="parameter"><code>ad</code></em>. See the example below.
+        </p></div><div class="refsect1" title="IDMAP OPTIONS"><a name="id266828"></a><h2>IDMAP OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">range = low - high</span></dt><dd><p>
                         Defines the available matching UID and GID range for which the
                         backend is authoritative. Note that the range acts as a filter.
@@ -17 +32 @@
                         This can be either the RFC2307 schema support included
                         in Windows 2003 R2 or the Service for Unix (SFU) schema.
-                </p></dd></dl></div></div><div class="refsect1" title="EXAMPLES"><a name="id266832"></a><h2>EXAMPLES</h2><p>
+                </p></dd></dl></div></div><div class="refsect1" title="EXAMPLES"><a name="id2668"></a><h2>EXAMPLES</h2><p>
         The following example shows how to retrieve idmappings from our principal and
         trusted AD domains. If trusted domains are present id conflicts must be
@@ -33 +48 @@
         idmap config CORP : backend  = ad
         idmap config CORP : range = 1000-999999
-        </pre></div><div class="refsect1" title="AUTHOR"><a name="id266852"></a><h2>AUTHOR</h2><p>
+        </pre></div><div class="refsect1" title="AUTHOR"><a name="id2668"></a><h2>AUTHOR</h2><p>
         The original Samba software and related utilities
         were created by Andrew Tridgell. Samba is now developed