The Samba-Bugzilla – Attachment 6123 Details for
Bug 6322
Documentation to idmap_ad is outdated.
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
manpage update for idmap_ad
0001-docs-clarify-the-idmap_ad-manpage-bug-6322.patch (text/plain), 1.62 KB, created by
Michael Adam
on 2010-12-07 14:43:54 UTC
(
hide
)
Description:
manpage update for idmap_ad
Filename:
MIME Type:
Creator:
Michael Adam
Created:
2010-12-07 14:43:54 UTC
Size:
1.62 KB
patch
obsolete
>From 91d9cb48a5224c7dc443747505f9dd1071f822ed Mon Sep 17 00:00:00 2001 >From: Michael Adam <obnox@samba.org> >Date: Tue, 7 Dec 2010 15:47:52 +0100 >Subject: [PATCH] docs: clarify the idmap_ad manpage (bug #6322) > >The idmap_ad module can not be used as a default backend. >--- > docs-xml/manpages-3/idmap_ad.8.xml | 17 +++++++++++++++++ > 1 files changed, 17 insertions(+), 0 deletions(-) > >diff --git a/docs-xml/manpages-3/idmap_ad.8.xml b/docs-xml/manpages-3/idmap_ad.8.xml >index 9b445df..3ecb07e 100644 >--- a/docs-xml/manpages-3/idmap_ad.8.xml >+++ b/docs-xml/manpages-3/idmap_ad.8.xml >@@ -25,6 +25,23 @@ > by the administrator by adding the posixAccount/posixGroup > classes and relative attribute/value pairs to the user and > group objects in the AD.</para> >+ >+ <para> >+ Note that the idmap_ad module has changed considerably since >+ Samba versions 3.0 and 3.2. >+ Currently, the <parameter>ad</parameter> backend >+ does not work as the the default idmap backend, but one has >+ to configure it separately for each domain for which one wants >+ to use it, using disjoint ranges. One usually needs to configure >+ a writeable default idmap range, using for example the >+ <parameter>tdb</parameter> or <parameter>ldap</parameter>) >+ backend, in order to be able to map the BUILTIN sids and >+ possibly other trusted domains. The writeable default config >+ is also needed in order to be able to create group mappings. >+ This catch-all default idmap configuration should have a range >+ that is disjoint from any explicitly configured domain with >+ idmap backend <parameter>ad</parameter>. See the example below. >+ </para> > </refsynopsisdiv> > > <refsect1> >-- >1.6.3.3 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 6322
:
4111
| 6123