The idmap backend provides a plugin interface for Winbind to use
varying backends to store SID/uid/gid mapping tables. This
option is mutually exclusive with the newer and more flexible
- <smbconfoption name="idmap domains"/> parameter. The main difference
+ <smbconfoption name="idmap domains"/> parameter. The main difference
between the "idmap backend" and the "idmap domains"
- is that the former only allows on backend for all domains while the
+ is that the former only allows one backend for all domains while the
latter supports configuring backends on a per domain basis.
</para>
<para>
The idmap config prefix provides a means of managing each domain
defined by the <smbconfoption name="idmap domains"/> option using Samba's
- parameteric option support. The idmap config prefix should be
+ parametric option support. The idmap config prefix should be
followed by the name of the domain, a colon, and a setting specific to
- the chosen backend. There are three options available for all domains:
+ the chosen backend. There are three options available for all domains:
</para>
<variablelist>
<varlistentry>
The following example illustrates how to configure the <citerefentry>
<refentrytitle>idmap_ad</refentrytitle><manvolnum>8</manvolnum></citerefentry>
for the CORP domain and the <citerefentry><refentrytitle>idmap_tdb</refentrytitle>
- <manvolnum>8</manvolnum></citerefentry> backend for all other domains. The
- TRUSTEDDOMAINS string is simply a key used to reference the "idmap
+ <manvolnum>8</manvolnum></citerefentry> backend for all other domains. The
+ TRUSTEDDOMAINS string is simply an arbitrary key used to reference the "idmap
config" settings and does not represent the actual name of a domain.
+ It is a catchall domain backend for any domain not explicitly listed.
</para>
<programlisting>