s3-docs: Add a clarification note for nss_info primary group membership calculation.
[ab/samba.git/.git] / docs-xml / smbdotconf / winbind / winbindnssinfo.xml
1 <samba:parameter name="winbind nss info"
2                  context="G"
3                                  type="boolean"
4                  advanced="1" developer="1"
5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
6 <description>
7
8         <para>This parameter is designed to control how Winbind retrieves Name
9         Service Information to construct a user's home directory and login shell.
10         Currently the following settings are available:
11
12         <itemizedlist>
13                 <listitem>
14                         <para><parameter moreinfo="none">template</parameter>
15                         - The default, using the parameters of <parameter moreinfo="none">template
16                         shell</parameter> and <parameter moreinfo="none">template homedir</parameter>)
17                         </para>
18                 </listitem>
19
20                 <listitem>
21                         <para><parameter moreinfo="none">&lt;sfu | sfu20 | rfc2307 &gt;</parameter>
22                         - When Samba is running in security = ads and your Active Directory
23                         Domain Controller does support the Microsoft "Services for Unix" (SFU)
24                         LDAP schema, winbind can retrieve the login shell and the home
25                         directory attributes directly from your Directory Server. For SFU 3.0 or 3.5 simply choose
26                         "sfu", if you use SFU 2.0 please choose "sfu20". Note that
27                         retrieving UID and GID from your ADS-Server requires to
28                         use <parameter moreinfo="none">idmap config DOMAIN:backend</parameter> = ad
29                         as well. The primary group membership is currently
30                         always calculated via the "primaryGroupID" LDAP attribute.
31                         </para>
32                 </listitem>
33         </itemizedlist>
34
35 </para>
36 </description>
37
38 <value type="default">template</value>
39 <value type="example">sfu</value>
40 </samba:parameter>