1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
3 <refentry id="idmap_nss.8">
6 <refentrytitle>idmap_nss</refentrytitle>
7 <manvolnum>8</manvolnum>
12 <refname>idmap_nss</refname>
13 <refpurpose>Samba's idmap_nss Backend for Winbind</refpurpose>
17 <title>DESCRIPTION</title>
19 <para>The idmap_nss plugin provides a means to map Unix users and groups
20 to Windows accounts and obseletes the "winbind trusted domains only"
21 smb.conf option. This provides a simple means of ensuring that the SID
22 for a Unix user named jsmith is reported as the one assigned to
23 DOMAIN\jsmith which is necessary for reporting ACLs on files and printers
24 stored on a Samba member server.
29 <title>EXAMPLES</title>
32 This example shows how to use idmap_nss to check the local accounts for its
33 own domain while using allocation to create new mappings for trusted domains
38 idmap domain = SAMBA TRUSTEDDOMAINS
40 idmap config SAMBA:backend = nss
41 idmap config SAMBA:readonly = yes
43 idmap config TRUSTEDDOMAINS:default = yes
44 idmap config TRUSTEDDOMAINS:backend = tdb
45 idmap config TRUSTEDDOMAINS:range = 10000 - 50000
47 idmap alloc backend = tdb
48 idmap alloc config:range = 10000 - 50000
56 The original Samba software and related utilities
57 were created by Andrew Tridgell. Samba is now developed
58 by the Samba Team as an Open Source project similar
59 to the way the Linux kernel is developed.