docs-xml/manpages/wbinfo.1.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
   3 <refentry id="wbinfo.1">
   4
   5 <refmeta>
   6         <refentrytitle>wbinfo</refentrytitle>
   7         <manvolnum>1</manvolnum>
   8         <refmiscinfo class="source">Samba</refmiscinfo>
   9         <refmiscinfo class="manual">User Commands</refmiscinfo>
  10         <refmiscinfo class="version">&doc.version;</refmiscinfo>
  11 </refmeta>
  12
  13
  14 <refnamediv>
  15         <refname>wbinfo</refname>
  16         <refpurpose>Query information from winbind daemon</refpurpose>
  17 </refnamediv>
  18
  19 <refsynopsisdiv>
  20         <cmdsynopsis>
  21                 <command>wbinfo</command>
  22                 <arg choice="opt">-a user%password</arg>
  23                 <arg choice="opt">--all-domains</arg>
  24                 <arg choice="opt">--allocate-gid</arg>
  25                 <arg choice="opt">--allocate-uid</arg>
  26                 <arg choice="opt">-c</arg>
  27                 <arg choice="opt">--ccache-save</arg>
  28                 <arg choice="opt">--change-user-password</arg>
  29                 <arg choice="opt">-D domain</arg>
  30                 <arg choice="opt">--dc-info domain</arg>
  31                 <arg choice="opt">--domain domain</arg>
  32                 <arg choice="opt">--dsgetdcname domain</arg>
  33                 <arg choice="opt">-g</arg>
  34                 <arg choice="opt">--getdcname domain</arg>
  35                 <arg choice="opt">--get-auth-user</arg>
  36                 <arg choice="opt">-G gid</arg>
  37                 <arg choice="opt">--gid-info gid</arg>
  38                 <arg choice="opt">--group-info group</arg>
  39                 <arg choice="opt">--help|-?</arg>
  40                 <arg choice="opt">-i user</arg>
  41                 <arg choice="opt">-I ip</arg>
  42                 <arg choice="opt">-K user%password</arg>
  43                 <arg choice="opt">--krb5ccname cctype</arg>
  44                 <arg choice="opt">--lanman</arg>
  45                 <arg choice="opt">--logoff</arg>
  46                 <arg choice="opt">--logoff-uid uid</arg>
  47                 <arg choice="opt">--logoff-user username</arg>
  48                 <arg choice="opt">--lookup-sids</arg>
  49                 <arg choice="opt">-m</arg>
  50                 <arg choice="opt">-n name</arg>
  51                 <arg choice="opt">-N netbios-name</arg>
  52                 <arg choice="opt">--ntlmv1</arg>
  53                 <arg choice="opt">--ntlmv2</arg>
  54                 <arg choice="opt">--online-status</arg>
  55                 <arg choice="opt">--own-domain</arg>
  56                 <arg choice="opt">-p</arg>
  57                 <arg choice="opt">-P|--ping-dc</arg>
  58                 <arg choice="opt">--pam-logon user%password</arg>
  59                 <arg choice="opt">-r user</arg>
  60                 <arg choice="opt">-R|--lookup-rids</arg>
  61                 <arg choice="opt">--remove-gid-mapping gid,sid</arg>
  62                 <arg choice="opt">--remove-uid-mapping uid,sid</arg>
  63                 <arg choice="opt">-s sid</arg>
  64                 <arg choice="opt">--separator</arg>
  65                 <arg choice="opt">--sequence</arg>
  66                 <arg choice="opt">--set-auth-user user%password</arg>
  67                 <arg choice="opt">--set-gid-mapping gid,sid</arg>
  68                 <arg choice="opt">--set-uid-mapping uid,sid</arg>
  69                 <arg choice="opt">-S sid</arg>
  70                 <arg choice="opt">--sid-aliases sid</arg>
  71                 <arg choice="opt">--sid-to-fullname sid</arg>
  72                 <arg choice="opt">--sids-to-unix-ids sidlist</arg>
  73                 <arg choice="opt">-t</arg>
  74                 <arg choice="opt">-u</arg>
  75                 <arg choice="opt">--uid-info uid</arg>
  76                 <arg choice="opt">--usage</arg>
  77                 <arg choice="opt">--user-domgroups sid</arg>
  78                 <arg choice="opt">--user-sidinfo sid</arg>
  79                 <arg choice="opt">--user-sids sid</arg>
  80                 <arg choice="opt">-U uid</arg>
  81                 <arg choice="opt">-V</arg>
  82                 <arg choice="opt">--verbose</arg>
  83                 <arg choice="opt">-Y sid</arg>
  84
  85         </cmdsynopsis>
  86 </refsynopsisdiv>
  87
  88 <refsect1>
  89         <title>DESCRIPTION</title>
  90
  91         <para>This tool is part of the <citerefentry><refentrytitle>samba</refentrytitle>
  92         <manvolnum>7</manvolnum></citerefentry> suite.</para>
  93
  94         <para>The <command>wbinfo</command> program queries and returns information
  95         created and used by the <citerefentry><refentrytitle>winbindd</refentrytitle>
  96         <manvolnum>8</manvolnum></citerefentry> daemon. </para>
  97
  98         <para>The <citerefentry><refentrytitle>winbindd</refentrytitle>
  99         <manvolnum>8</manvolnum></citerefentry> daemon must be configured
 100         and running for the <command>wbinfo</command> program to be able
 101         to return information.</para>
 102 </refsect1>
 103
 104 <refsect1>
 105         <title>OPTIONS</title>
 106
 107         <variablelist>
 108                 <varlistentry>
 109                 <term>-a|--authenticate <replaceable>username%password</replaceable></term>
 110                 <listitem><para>Attempt to authenticate a user via <citerefentry>
 111                 <refentrytitle>winbindd</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
 112                 This checks both authentication methods and reports its results.
 113                 </para><note><para>Do not be tempted to use this
 114                 functionality for authentication in third-party
 115                 applications.  Instead use <citerefentry><refentrytitle>ntlm_auth</refentrytitle>
 116         <manvolnum>1</manvolnum></citerefentry>.</para></note></listitem>
 117                 </varlistentry>
 118
 119                 <varlistentry>
 120                 <term>--allocate-gid</term>
 121                 <listitem><para>Get a new GID out of idmap
 122                 </para></listitem>
 123                 </varlistentry>
 124
 125                 <varlistentry>
 126                 <term>--allocate-uid</term>
 127                 <listitem><para>Get a new UID out of idmap
 128                 </para></listitem>
 129                 </varlistentry>
 130
 131                 <varlistentry>
 132                 <term>--all-domains</term>
 133                 <listitem><para>List all domains (trusted and
 134                 own domain).
 135                 </para></listitem>
 136                 </varlistentry>
 137
 138                 <varlistentry>
 139                 <term>-c|--change-secret</term>
 140                 <listitem><para>Change the trust account password. May be used
 141                 in conjunction with <option>domain</option> in order to change
 142                 interdomain trust account passwords.
 143                 </para></listitem>
 144                 </varlistentry>
 145
 146                 <varlistentry>
 147                 <term>--ccache-save <replaceable>username%password</replaceable></term>
 148                 <listitem><para>Store user and password for ccache.
 149                 </para></listitem>
 150                 </varlistentry>
 151
 152                 <varlistentry>
 153                 <term>--change-user-password <replaceable>username</replaceable></term>
 154                 <listitem><para>Change the password of a user. The old and new password will be prompted.
 155                 </para></listitem>
 156                 </varlistentry>
 157
 158                 <varlistentry>
 159                 <term>--dc-info <replaceable>domain</replaceable></term>
 160                 <listitem><para>Displays information about the current domain controller for a domain.
 161                 </para></listitem>
 162                 </varlistentry>
 163
 164                 <varlistentry>
 165                 <term>--domain <replaceable>name</replaceable></term>
 166                 <listitem><para>This parameter sets the domain on which any specified
 167                 operations will performed.  If special domain name '.' is used to represent
 168                 the current domain to which <citerefentry><refentrytitle>winbindd</refentrytitle>
 169                 <manvolnum>8</manvolnum></citerefentry> belongs. A '*' as the domain name
 170                 means to enumerate over all domains (NOTE: This can take a long time and use
 171                 a lot of memory).
 172                 </para></listitem>
 173                 </varlistentry>
 174
 175                 <varlistentry>
 176                 <term>-D|--domain-info <replaceable>domain</replaceable></term>
 177                 <listitem><para>Show most of the info we have about the
 178                 specified domain.
 179                 </para></listitem>
 180                 </varlistentry>
 181
 182                 <varlistentry>
 183                 <term>--dsgetdcname <replaceable>domain</replaceable></term>
 184                 <listitem><para>Find a DC for a domain.
 185                 </para></listitem>
 186                 </varlistentry>
 187
 188                 <varlistentry>
 189                 <term>--gid-info <replaceable>gid</replaceable></term>
 190                 <listitem><para>Get group info from gid.
 191                 </para></listitem>
 192                 </varlistentry>
 193
 194                 <varlistentry>
 195                 <term>--group-info <replaceable>group</replaceable></term>
 196                 <listitem><para>Get group info from group name.
 197                 </para></listitem>
 198                 </varlistentry>
 199
 200                 <varlistentry>
 201                 <term>-g|--domain-groups</term>
 202                 <listitem><para>This option will list all groups available
 203                 in the Windows NT domain for which the <citerefentry><refentrytitle>samba</refentrytitle>
 204                 <manvolnum>7</manvolnum></citerefentry> daemon is operating in. Groups in all trusted domains
 205                 can be listed with the --domain='*' option.  Note that this operation does not assign
 206                 group ids to any groups that have not already been
 207                 seen by <citerefentry><refentrytitle>winbindd</refentrytitle>
 208                 <manvolnum>8</manvolnum></citerefentry>. </para></listitem>
 209                 </varlistentry>
 210
 211                 <varlistentry>
 212                 <term>--get-auth-user</term>
 213                 <listitem><para>Print username and password used by <citerefentry>
 214                 <refentrytitle>winbindd</refentrytitle><manvolnum>8</manvolnum></citerefentry>
 215                 during session setup to a domain controller. Username
 216                 and password can be set using <option>--set-auth-user</option>.
 217                 Only available for root.</para></listitem>
 218                 </varlistentry>
 219
 220                 <varlistentry>
 221                 <term>--getdcname <replaceable>domain</replaceable></term>
 222                 <listitem><para>Get the DC name for the specified domain.
 223                 </para></listitem>
 224                 </varlistentry>
 225
 226                 <varlistentry>
 227                 <term>-G|--gid-to-sid <replaceable>gid</replaceable></term>
 228                 <listitem><para>Try to convert a UNIX group id to a Windows
 229                 NT SID.  If the gid specified does not refer to one within
 230                 the idmap gid range then the operation will fail. </para></listitem>
 231                 </varlistentry>
 232
 233                 <varlistentry>
 234                 <term>-?</term>
 235                 <listitem><para>Print brief help overview.
 236                 </para></listitem>
 237                 </varlistentry>
 238
 239                 <varlistentry>
 240                 <term>-i|--user-info <replaceable>user</replaceable></term>
 241                 <listitem><para>Get user info.
 242                 </para></listitem>
 243                 </varlistentry>
 244
 245                 <varlistentry>
 246                 <term>-I|--WINS-by-ip <replaceable>ip</replaceable></term>
 247                 <listitem><para>The <parameter>-I</parameter> option
 248                 queries <citerefentry><refentrytitle>winbindd</refentrytitle>
 249                 <manvolnum>8</manvolnum></citerefentry> to send a node status
 250                 request to get the NetBIOS name associated with the IP address
 251                 specified by the <parameter>ip</parameter> parameter.
 252                 </para></listitem>
 253                 </varlistentry>
 254
 255                 <varlistentry>
 256                 <term>-K|--krb5auth <replaceable>username%password</replaceable></term>
 257                 <listitem><para>Attempt to authenticate a user via Kerberos.
 258                 </para></listitem>
 259                 </varlistentry>
 260
 261                 <varlistentry>
 262                 <term>--krb5ccname <replaceable>KRB5CCNAME</replaceable></term>
 263                 <listitem><para>Allows one to request a specific kerberos credential
 264                                 cache type used for authentication.
 265                 </para></listitem>
 266                 </varlistentry>
 267
 268                 <varlistentry>
 269                 <term>--lanman</term>
 270                 <listitem><para>Use lanman cryptography for user authentication.
 271                 </para></listitem>
 272                 </varlistentry>
 273
 274                 <varlistentry>
 275                 <term>--logoff</term>
 276                 <listitem><para>Logoff a user.
 277                 </para></listitem>
 278                 </varlistentry>
 279
 280                 <varlistentry>
 281                 <term>--logoff-uid <replaceable>UID</replaceable></term>
 282                 <listitem><para>Define user uid used during logoff request.
 283                 </para></listitem>
 284                 </varlistentry>
 285
 286                 <varlistentry>
 287                 <term>--logoff-user <replaceable>USERNAME</replaceable></term>
 288                 <listitem><para>Define username used during logoff request.
 289                 </para></listitem>
 290                 </varlistentry>
 291
 292                 <varlistentry>
 293                 <term>--lookup-sids <replaceable>SID1,SID2...</replaceable></term>
 294                 <listitem><para>Looks up SIDs. SIDs must be specified as ASCII strings in the traditional Microsoft
 295                                 format. For example, S-1-5-21-1455342024-3071081365-2475485837-500.
 296                 </para></listitem>
 297                 </varlistentry>
 298
 299                 <varlistentry>
 300                 <term>-m|--trusted-domains</term>
 301                 <listitem><para>Produce a list of domains trusted by the
 302                 Windows NT server <citerefentry><refentrytitle>winbindd</refentrytitle>
 303                 <manvolnum>8</manvolnum></citerefentry> contacts
 304                 when resolving names.  This list does not include the Windows
 305                 NT domain the server is a Primary Domain Controller for.
 306                 </para></listitem>
 307                 </varlistentry>
 308
 309                 <varlistentry>
 310                 <term>-n|--name-to-sid <replaceable>name</replaceable></term>
 311                 <listitem><para>The <parameter>-n</parameter> option
 312                 queries <citerefentry><refentrytitle>winbindd</refentrytitle>
 313                 <manvolnum>8</manvolnum></citerefentry> for the SID
 314                 associated with the name specified. Domain names can be specified
 315                 before the user name by using the winbind separator character.
 316                 For example CWDOM1/Administrator refers to the Administrator
 317                 user in the domain CWDOM1.  If no domain is specified then the
 318                 domain used is the one specified in the <citerefentry><refentrytitle>smb.conf</refentrytitle>
 319                 <manvolnum>5</manvolnum></citerefentry> <parameter>workgroup
 320                 </parameter> parameter. </para></listitem>
 321                 </varlistentry>
 322
 323                 <varlistentry>
 324                 <term>-N|--WINS-by-name <replaceable>name</replaceable></term>
 325                 <listitem><para>The <parameter>-N</parameter> option
 326                 queries <citerefentry><refentrytitle>winbindd</refentrytitle>
 327                 <manvolnum>8</manvolnum></citerefentry> to query the WINS
 328                 server for the IP address associated with the NetBIOS name
 329                 specified by the <parameter>name</parameter> parameter.
 330                 </para></listitem>
 331                 </varlistentry>
 332
 333                 <varlistentry>
 334                 <term>--ntlmv1</term>
 335                 <listitem><para>Use NTLMv1 cryptography for user authentication.
 336                 </para></listitem>
 337                 </varlistentry>
 338
 339                 <varlistentry>
 340                 <term>--ntlmv2</term>
 341                 <listitem><para>Use NTLMv2 cryptography for user
 342                 authentication. NTLMv2 is the default method, this
 343                 option is only maintained for compatibility.
 344                 </para></listitem>
 345                 </varlistentry>
 346
 347                 <varlistentry>
 348                 <term>--online-status <replaceable>domain</replaceable></term>
 349                 <listitem><para>Display whether winbind currently maintains an
 350                                 active connection or not. An optional domain
 351                                 argument limits the output to the online status
 352                                 of a given domain.
 353                 </para></listitem>
 354                 </varlistentry>
 355
 356                 <varlistentry>
 357                 <term>--own-domain</term>
 358                 <listitem><para>List own domain.
 359                 </para></listitem>
 360                 </varlistentry>
 361
 362                 <varlistentry>
 363                 <term>--pam-logon <replaceable>username%password</replaceable></term>
 364                 <listitem><para>Attempt to authenticate a user in the same way
 365                                 pam_winbind would do.
 366                 </para></listitem>
 367                 </varlistentry>
 368
 369                 <varlistentry>
 370                 <term>-p|--ping</term>
 371                 <listitem><para>Check whether <citerefentry><refentrytitle>winbindd</refentrytitle>
 372                 <manvolnum>8</manvolnum></citerefentry> is still alive.
 373                 Prints out either 'succeeded' or 'failed'.
 374                 </para></listitem>
 375                 </varlistentry>
 376
 377                 <varlistentry>
 378                 <term>-P|--ping-dc</term>
 379                 <listitem><para>Issue a no-effect command to our DC. This
 380                     checks if our secure channel connection to our domain
 381                     controller is still alive. It has much less impact than
 382                     wbinfo -t.
 383                 </para></listitem>
 384                 </varlistentry>
 385
 386                 <varlistentry>
 387                 <term>-r|--user-groups <replaceable>username</replaceable></term>
 388                 <listitem>
 389                         <para>
 390                         Try to obtain the list of UNIX group ids to which the
 391                         user belongs.  This only works for users defined on a
 392                         Domain Controller.
 393                         </para>
 394
 395                         <para>There are two scenaries:</para>
 396                         <orderedlist>
 397                                 <listitem>
 398                                 <para>
 399                                 User authenticated: When the user has been
 400                                 authenticated, the access token for the user is
 401                                 cached. The correct group memberships are then
 402                                 returned from the cached user token (which can
 403                                 be outdated).
 404                                 </para>
 405                                 </listitem>
 406
 407                                 <listitem>
 408                                 <para>
 409                                 User *NOT* authenticated: The information is
 410                                 queries from the domain controller using the
 411                                 machine account credentials which have limited
 412                                 permissions. The result is normally incomplete
 413                                 and can be also incorrect.
 414                                 </para></listitem>
 415                         </orderedlist>
 416                 </listitem>
 417                 </varlistentry>
 418
 419                 <varlistentry>
 420                 <term>-R|--lookup-rids <replaceable>rid1, rid2, rid3...</replaceable></term>
 421                 <listitem><para>Converts RIDs to names. Uses a comma separated
 422                                 list of rids.
 423                 </para></listitem>
 424                 </varlistentry>
 425
 426                 <varlistentry>
 427                 <term>--remove-gid-mapping <replaceable>GID,SID</replaceable></term>
 428                 <listitem><para>Removes an existing GID to SID mapping from the database.
 429                 </para></listitem>
 430                 </varlistentry>
 431
 432                 <varlistentry>
 433                 <term>--remove-uid-mapping <replaceable>UID,SID</replaceable></term>
 434                 <listitem><para>Removes an existing UID to SID mapping from the database.
 435                 </para></listitem>
 436                 </varlistentry>
 437
 438                 <varlistentry>
 439                 <term>-s|--sid-to-name <replaceable>sid</replaceable></term>
 440                 <listitem><para>Use <parameter>-s</parameter> to resolve
 441                 a SID to a name.  This is the inverse of the <parameter>-n
 442                 </parameter> option above.  SIDs must be specified as ASCII strings
 443                 in the traditional Microsoft format. For example,
 444                 S-1-5-21-1455342024-3071081365-2475485837-500. </para></listitem>
 445                 </varlistentry>
 446
 447                 <varlistentry>
 448                 <term>--separator</term>
 449                 <listitem><para>Get the active winbind separator.
 450                 </para></listitem>
 451                 </varlistentry>
 452
 453                 <varlistentry>
 454                 <term>--sequence</term>
 455                 <listitem><para>This command has been deprecated.  Please use
 456                                 the --online-status option instead.
 457                 </para></listitem>
 458                 </varlistentry>
 459
 460                 <varlistentry>
 461                 <term>--set-auth-user <replaceable>username%password</replaceable></term>
 462                 <listitem><para>Store username and password used by <citerefentry>
 463                 <refentrytitle>winbindd</refentrytitle><manvolnum>8</manvolnum>
 464                 </citerefentry> during session setup to a domain controller.  This enables
 465                 winbindd to operate in a Windows 2000 domain with Restrict
 466                 Anonymous turned on (a.k.a. Permissions compatible with
 467                 Windows 2000 servers only).
 468                 </para></listitem>
 469                 </varlistentry>
 470
 471                 <varlistentry>
 472                 <term>--set-gid-mapping <replaceable>GID,SID</replaceable></term>
 473                 <listitem><para>Create a GID to SID mapping in the database.
 474                 </para></listitem>
 475                 </varlistentry>
 476
 477                 <varlistentry>
 478                 <term>--set-uid-mapping <replaceable>UID,SID</replaceable></term>
 479                 <listitem><para>Create a UID to SID mapping in the database.
 480                 </para></listitem>
 481                 </varlistentry>
 482
 483                 <varlistentry>
 484                 <term>-S|--sid-to-uid <replaceable>sid</replaceable></term>
 485                 <listitem><para>Convert a SID to a UNIX user id.  If the SID
 486                 does not correspond to a UNIX user mapped by <citerefentry>
 487                 <refentrytitle>winbindd</refentrytitle><manvolnum>8</manvolnum>
 488                 </citerefentry> then the operation will fail. </para></listitem>
 489                 </varlistentry>
 490
 491                 <varlistentry>
 492                 <term>--sid-aliases <replaceable>sid</replaceable></term>
 493                 <listitem><para>Get SID aliases for a given SID.
 494                 </para></listitem>
 495                 </varlistentry>
 496
 497                 <varlistentry>
 498                 <term>--sid-to-fullname <replaceable>sid</replaceable></term>
 499                 <listitem><para>Converts a SID to a full username
 500                                 (DOMAIN\username).
 501                 </para></listitem>
 502                 </varlistentry>
 503
 504                 <varlistentry>
 505                 <term>--sids-to-unix-ids <replaceable>sid1,sid2,sid3...</replaceable></term>
 506                 <listitem><para>Resolve SIDs to Unix IDs.
 507                 SIDs must be specified as ASCII strings
 508                 in the traditional Microsoft format. For example,
 509                 S-1-5-21-1455342024-3071081365-2475485837-500. </para></listitem>
 510                 </varlistentry>
 511
 512                 <varlistentry>
 513                 <term>-t|--check-secret</term>
 514                 <listitem><para>Verify that the workstation trust account
 515                 created when the Samba server is added to the Windows NT
 516                 domain is working. May be used in conjunction with
 517                 <option>domain</option> in order to verify interdomain
 518                 trust accounts.</para></listitem>
 519                 </varlistentry>
 520
 521                 <varlistentry>
 522                 <term>-u|--domain-users</term>
 523                 <listitem><para>This option will list all users available
 524                 in the Windows NT domain for which the <citerefentry><refentrytitle>winbindd</refentrytitle>
 525                 <manvolnum>8</manvolnum></citerefentry> daemon is operating in. Users in all trusted domains
 526                 can be listed with the --domain='*' option.  Note that this operation does not assign
 527                 user ids to any users that have not already been seen by <citerefentry>
 528                 <refentrytitle>winbindd</refentrytitle><manvolnum>8</manvolnum></citerefentry>
 529                 .</para></listitem>
 530                 </varlistentry>
 531
 532                 <varlistentry>
 533                 <term>--uid-info <replaceable>uid</replaceable></term>
 534                 <listitem><para>Get user info for the user connected to
 535                 user id UID.</para></listitem>
 536                 </varlistentry>
 537
 538                 <varlistentry>
 539                 <term>--usage</term>
 540                 <listitem><para>Print brief help overview.
 541                 </para></listitem>
 542                 </varlistentry>
 543
 544                 <varlistentry>
 545                 <term>--user-domgroups <replaceable>sid</replaceable></term>
 546                 <listitem><para>Get user domain groups.
 547                 </para></listitem>
 548                 </varlistentry>
 549
 550                 <varlistentry>
 551                 <term>--user-sidinfo <replaceable>sid</replaceable></term>
 552                 <listitem><para>Get user info by sid.
 553                 </para></listitem>
 554                 </varlistentry>
 555
 556
 557                 <varlistentry>
 558                 <term>--user-sids <replaceable>sid</replaceable></term>
 559                 <listitem><para>Get user group SIDs for user.
 560                 </para></listitem>
 561                 </varlistentry>
 562
 563                 <varlistentry>
 564                 <term>-U|--uid-to-sid <replaceable>uid</replaceable></term>
 565                 <listitem><para>Try to convert a UNIX user id to a Windows NT
 566                 SID.  If the uid specified does not refer to one within
 567                 the idmap range then the operation will fail. </para></listitem>
 568                 </varlistentry>
 569
 570                 <varlistentry>
 571                 <term>--verbose</term>
 572                 <listitem><para>
 573                 Print additional information about the query results.
 574                 </para></listitem>
 575                 </varlistentry>
 576
 577                 <varlistentry>
 578                 <term>-Y|--sid-to-gid <replaceable>sid</replaceable></term>
 579                 <listitem><para>Convert a SID to a UNIX group id.  If the SID
 580                 does not correspond to a UNIX group mapped by <citerefentry>
 581                 <refentrytitle>winbindd</refentrytitle><manvolnum>8</manvolnum></citerefentry> then
 582                 the operation will fail. </para></listitem>
 583                 </varlistentry>
 584
 585                 &stdarg.version;
 586                 &stdarg.help;
 587
 588         </variablelist>
 589 </refsect1>
 590
 591
 592 <refsect1>
 593         <title>EXIT STATUS</title>
 594
 595         <para>The wbinfo program returns 0 if the operation
 596         succeeded, or 1 if the operation failed.  If the <citerefentry>
 597         <refentrytitle>winbindd</refentrytitle><manvolnum>8</manvolnum>
 598         </citerefentry> daemon is not working <command>wbinfo</command> will always return
 599         failure. </para>
 600 </refsect1>
 601
 602
 603 <refsect1>
 604         <title>VERSION</title>
 605
 606         <para>This man page is part of version &doc.version; of
 607         the Samba suite.</para>
 608 </refsect1>
 609
 610 <refsect1>
 611         <title>SEE ALSO</title>
 612         <para><citerefentry><refentrytitle>winbindd</refentrytitle>
 613         <manvolnum>8</manvolnum></citerefentry> and <citerefentry><refentrytitle>ntlm_auth</refentrytitle>
 614         <manvolnum>1</manvolnum></citerefentry></para>
 615 </refsect1>
 616
 617 <refsect1>
 618         <title>AUTHOR</title>
 619
 620         <para>The original Samba software and related utilities
 621         were created by Andrew Tridgell. Samba is now developed
 622         by the Samba Team as an Open Source project similar
 623         to the way the Linux kernel is developed.</para>
 624
 625         <para><command>wbinfo</command> and <command>winbindd</command>
 626         were written by Tim Potter.</para>
 627
 628         <para>The conversion to DocBook for Samba 2.2 was done
 629         by Gerald Carter. The conversion to DocBook XML 4.2 for Samba
 630         3.0 was done by Alexander Bokovoy.</para>
 631 </refsect1>
 632
 633 </refentry>