+++ /dev/null
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>idmap_tdb2</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="idmap_tdb2"><a name="idmap_tdb2.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>idmap_tdb2 — Samba's idmap_tdb2 Backend for Winbind</p></div><div class="refsynopsisdiv" title="DESCRIPTION"><h2>DESCRIPTION</h2><p>
- The idmap_tdb2 plugin is a substitute for the default idmap_tdb
- backend used by winbindd for storing SID/uid/gid mapping tables
- in clustered environments with Samba and CTDB.
- </p><p>
- In contrast to read only backends like idmap_rid, it is an allocating
- backend: This means that it needs to allocate new user and group IDs in
- order to create new mappings.
- </p></div><div class="refsect1" title="IDMAP OPTIONS"><a name="id266343"></a><h2>IDMAP OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">range = low - high</span></dt><dd><p>
- Defines the available matching uid and gid range for which the
- backend is authoritative.
- </p></dd><dt><span class="term">script</span></dt><dd><p>
- This option can be used to configure an external program
- for performing id mappings instead of using the tdb
- counter. The mappings are then stored int tdb2 idmap
- database. For details see the section on IDMAP SCRIPT below.
- </p></dd></dl></div></div><div class="refsect1" title="IDMAP SCRIPT"><a name="id266833"></a><h2>IDMAP SCRIPT</h2><p>
- The tdb2 idmap backend supports an external program for performing id mappings
- through the smb.conf option <em class="parameter"><code>idmap config * : script</code></em> or
- its deprecated legacy form <em class="parameter"><code>idmap : script</code></em>.
- </p><p>
- The mappings obtained by the script are then stored in the idmap tdb2
- database instead of mappings created by the incrementing id counters.
- It is therefore important that the script covers the complete range of
- SIDs that can be passed in for SID to Unix ID mapping, since otherwise
- SIDs unmapped by the script might get mapped to IDs that had
- previously been mapped by the script.
- </p><p>
- The script should accept the following command line options.
- </p><pre class="programlisting">
- SIDTOID S-1-xxxx
- IDTOSID UID xxxx
- IDTOSID GID xxxx
- </pre><p>
- And it should return one of the following responses as a single line of
- text.
- </p><pre class="programlisting">
- UID:yyyy
- GID:yyyy
- SID:yyyy
- ERR:yyyy
- </pre></div><div class="refsect1" title="EXAMPLES"><a name="id266880"></a><h2>EXAMPLES</h2><p>
- This example shows how tdb2 is used as a the default idmap backend.
- </p><pre class="programlisting">
- [global]
- idmap config * : backend = tdb2
- idmap config * : range = 1000000-2000000
- </pre><p>
- This example shows how tdb2 is used as a the default idmap backend
- using an external program via the script parameter:
- </p><pre class="programlisting">
- [global]
- idmap config * : backend = tdb2
- idmap config * : range = 1000000-2000000
- idmap config * : script = /usr/local/samba/bin/idmap_script.sh
- </pre></div><div class="refsect1" title="AUTHOR"><a name="id265703"></a><h2>AUTHOR</h2><p>
- The original Samba software and related utilities
- were created by Andrew Tridgell. Samba is now developed
- by the Samba Team as an Open Source project similar
- to the way the Linux kernel is developed.
- </p></div></div></body></html>
git.samba.org / abartlet / samba-debian.git / blobdiff