1 <samba:parameter name="passdb backend"
4 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
7 <para>This option allows the administrator to chose which backend
8 will be used for storing user and possibly group information. This allows
9 you to swap between different storage mechanisms without recompile. </para>
11 <para>The parameter value is divided into two parts, the backend's name, and a 'location'
12 string that has meaning only to that particular backed. These are separated
13 by a : character.</para>
15 <para>Available backends can include:
18 <para><command moreinfo="none">smbpasswd</command> - The old plaintext passdb
19 backend. Some Samba features will not work if this passdb
20 backend is used. Takes a path to the smbpasswd file as an
26 <para><command moreinfo="none">tdbsam</command> - The TDB based password storage
27 backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb
28 in the <smbconfoption name="private dir"/> directory.</para>
32 <para><command moreinfo="none">ldapsam</command> - The LDAP based passdb
33 backend. Takes an LDAP URL as an optional argument (defaults to
34 <command moreinfo="none">ldap://localhost</command>)</para>
36 <para>LDAP connections should be secured where possible. This may be done using either
37 Start-TLS (see <smbconfoption name="ldap ssl"/>) or by
38 specifying <parameter moreinfo="none">ldaps://</parameter> in
39 the URL argument. </para>
41 <para>Multiple servers may also be specified in double-quotes.
42 Whether multiple servers are supported or not and the exact
43 syntax depends on the LDAP library you use.
52 passdb backend = tdbsam:/etc/samba/private/passdb.tdb
54 or multi server LDAP URL with OpenLDAP library:
56 passdb backend = ldapsam:"ldap://ldap-1.example.com ldap://ldap-2.example.com"
58 or multi server LDAP URL with Netscape based LDAP library:
60 passdb backend = ldapsam:"ldap://ldap-1.example.com ldap-2.example.com"
64 <value type="default">tdbsam</value>