2004-04-07 14:15:11 +04:00
<?xml version="1.0" encoding="iso-8859-1"?>
2005-03-12 22:33:59 +03:00
<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
2004-04-07 14:15:11 +04:00
<refentry id= "wbinfo.1" >
<refmeta >
<refentrytitle > wbinfo</refentrytitle>
<manvolnum > 1</manvolnum>
2008-04-07 00:26:45 +04:00
<refmiscinfo class= "source" > Samba</refmiscinfo>
<refmiscinfo class= "manual" > User Commands</refmiscinfo>
2017-12-12 11:08:06 +03:00
<refmiscinfo class= "version" > &doc.version; </refmiscinfo>
2004-04-07 14:15:11 +04:00
</refmeta>
<refnamediv >
<refname > wbinfo</refname>
<refpurpose > Query information from winbind daemon</refpurpose>
</refnamediv>
<refsynopsisdiv >
<cmdsynopsis >
<command > wbinfo</command>
<arg choice= "opt" > -a user%password</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --all-domains</arg>
<arg choice= "opt" > --allocate-gid</arg>
<arg choice= "opt" > --allocate-uid</arg>
2009-10-06 20:20:23 +04:00
<arg choice= "opt" > -c</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > --ccache-save</arg>
<arg choice= "opt" > --change-user-password</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > -D domain</arg>
2013-11-14 19:23:03 +04:00
<arg choice= "opt" > --dc-info domain</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > --domain domain</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > --dsgetdcname domain</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -g</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --getdcname domain</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > --get-auth-user</arg>
<arg choice= "opt" > -G gid</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > --gid-info gid</arg>
<arg choice= "opt" > --group-info group</arg>
2011-02-23 17:48:23 +03:00
<arg choice= "opt" > --help|-?</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > -i user</arg>
<arg choice= "opt" > -I ip</arg>
<arg choice= "opt" > -K user%password</arg>
2013-11-14 19:23:20 +04:00
<arg choice= "opt" > --krb5ccname cctype</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > --lanman</arg>
2013-11-14 19:29:10 +04:00
<arg choice= "opt" > --logoff</arg>
<arg choice= "opt" > --logoff-uid uid</arg>
<arg choice= "opt" > --logoff-user username</arg>
2013-11-14 19:33:19 +04:00
<arg choice= "opt" > --lookup-sids</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -m</arg>
<arg choice= "opt" > -n name</arg>
<arg choice= "opt" > -N netbios-name</arg>
2016-11-14 18:38:29 +03:00
<arg choice= "opt" > --ntlmv1</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > --ntlmv2</arg>
<arg choice= "opt" > --online-status</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --own-domain</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -p</arg>
2011-02-23 17:48:23 +03:00
<arg choice= "opt" > -P|--ping-dc</arg>
2013-11-14 19:36:21 +04:00
<arg choice= "opt" > --pam-logon user%password</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -r user</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > -R|--lookup-rids</arg>
2013-11-14 19:40:56 +04:00
<arg choice= "opt" > --remove-gid-mapping gid,sid</arg>
<arg choice= "opt" > --remove-uid-mapping uid,sid</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > -s sid</arg>
<arg choice= "opt" > --separator</arg>
2013-11-14 20:13:38 +04:00
<arg choice= "opt" > --sequence</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --set-auth-user user%password</arg>
2013-11-14 19:42:56 +04:00
<arg choice= "opt" > --set-gid-mapping gid,sid</arg>
<arg choice= "opt" > --set-uid-mapping uid,sid</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -S sid</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > --sid-aliases sid</arg>
<arg choice= "opt" > --sid-to-fullname sid</arg>
2013-11-14 20:18:40 +04:00
<arg choice= "opt" > --sids-to-unix-ids sidlist</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -t</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > -u</arg>
2007-08-13 02:57:04 +04:00
<arg choice= "opt" > --uid-info uid</arg>
2011-11-04 21:02:30 +04:00
<arg choice= "opt" > --usage</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --user-domgroups sid</arg>
2011-08-05 14:25:52 +04:00
<arg choice= "opt" > --user-sidinfo sid</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --user-sids sid</arg>
<arg choice= "opt" > -U uid</arg>
<arg choice= "opt" > -V</arg>
2008-04-01 00:40:24 +04:00
<arg choice= "opt" > --verbose</arg>
2011-02-23 17:48:23 +03:00
<arg choice= "opt" > -Y sid</arg>
2004-04-07 14:15:11 +04:00
</cmdsynopsis>
</refsynopsisdiv>
<refsect1 >
<title > DESCRIPTION</title>
2004-04-27 18:43:44 +04:00
<para > This tool is part of the <citerefentry > <refentrytitle > samba</refentrytitle>
2004-04-07 14:15:11 +04:00
<manvolnum > 7</manvolnum> </citerefentry> suite.</para>
2007-08-21 02:47:12 +04:00
<para > The <command > wbinfo</command> program queries and returns information
2004-04-07 14:15:11 +04:00
created and used by the <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> daemon. </para>
<para > The <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> daemon must be configured
and running for the <command > wbinfo</command> program to be able
2004-04-07 14:15:11 +04:00
to return information.</para>
</refsect1>
<refsect1 >
<title > OPTIONS</title>
2007-08-21 02:47:12 +04:00
<variablelist >
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -a|--authenticate <replaceable > username%password</replaceable> </term>
<listitem > <para > Attempt to authenticate a user via <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum> </citerefentry> .
This checks both authentication methods and reports its results.
2004-10-02 14:46:13 +04:00
</para> <note > <para > Do not be tempted to use this
functionality for authentication in third-party
applications. Instead use <citerefentry > <refentrytitle > ntlm_auth</refentrytitle>
<manvolnum > 1</manvolnum> </citerefentry> .</para> </note> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --allocate-gid</term>
<listitem > <para > Get a new GID out of idmap
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --allocate-uid</term>
<listitem > <para > Get a new UID out of idmap
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > --all-domains</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > List all domains (trusted and
2006-07-20 00:39:44 +04:00
own domain).
</para> </listitem>
</varlistentry>
2009-10-06 20:20:23 +04:00
<varlistentry >
<term > -c|--change-secret</term>
<listitem > <para > Change the trust account password. May be used
in conjunction with <option > domain</option> in order to change
interdomain trust account passwords.
</para> </listitem>
</varlistentry>
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > --ccache-save <replaceable > username%password</replaceable> </term>
<listitem > <para > Store user and password for ccache.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --change-user-password <replaceable > username</replaceable> </term>
<listitem > <para > Change the password of a user. The old and new password will be prompted.
</para> </listitem>
</varlistentry>
2013-11-14 19:23:03 +04:00
<varlistentry >
<term > --dc-info <replaceable > domain</replaceable> </term>
<listitem > <para > Displays information about the current domain controller for a domain.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > --domain <replaceable > name</replaceable> </term>
2004-04-07 14:15:11 +04:00
<listitem > <para > This parameter sets the domain on which any specified
operations will performed. If special domain name '.' is used to represent
2008-09-04 13:25:55 +04:00
the current domain to which <citerefentry > <refentrytitle > winbindd</refentrytitle>
2013-07-17 18:13:22 +04:00
<manvolnum > 8</manvolnum> </citerefentry> belongs. A '*' as the domain name
means to enumerate over all domains (NOTE: This can take a long time and use
a lot of memory).
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -D|--domain-info <replaceable > domain</replaceable> </term>
<listitem > <para > Show most of the info we have about the
specified domain.
2006-07-20 00:39:44 +04:00
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > --dsgetdcname <replaceable > domain</replaceable> </term>
<listitem > <para > Find a DC for a domain.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --gid-info <replaceable > gid</replaceable> </term>
<listitem > <para > Get group info from gid.
</para> </listitem>
</varlistentry>
<varlistentry >
2011-09-30 19:07:05 +04:00
<term > --group-info <replaceable > group</replaceable> </term>
<listitem > <para > Get group info from group name.
2011-02-23 17:48:23 +03:00
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > -g|--domain-groups</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > This option will list all groups available
2004-04-27 18:43:44 +04:00
in the Windows NT domain for which the <citerefentry > <refentrytitle > samba</refentrytitle>
2004-04-07 14:15:11 +04:00
<manvolnum > 7</manvolnum> </citerefentry> daemon is operating in. Groups in all trusted domains
2013-07-17 18:13:22 +04:00
can be listed with the --domain='*' option. Note that this operation does not assign
2007-08-21 02:47:12 +04:00
group ids to any groups that have not already been
2004-04-07 14:15:11 +04:00
seen by <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> . </para> </listitem>
</varlistentry>
<varlistentry >
<term > --get-auth-user</term>
2008-09-04 13:25:55 +04:00
<listitem > <para > Print username and password used by <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum> </citerefentry>
2007-08-21 02:47:12 +04:00
during session setup to a domain controller. Username
and password can be set using <option > --set-auth-user</option> .
2006-07-20 00:39:44 +04:00
Only available for root.</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2006-07-20 00:39:44 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > --getdcname <replaceable > domain</replaceable> </term>
2006-07-20 00:39:44 +04:00
<listitem > <para > Get the DC name for the specified domain.
</para> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -G|--gid-to-sid <replaceable > gid</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Try to convert a UNIX group id to a Windows
NT SID. If the gid specified does not refer to one within
2004-04-07 14:15:11 +04:00
the idmap gid range then the operation will fail. </para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > -?</term>
<listitem > <para > Print brief help overview.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -i|--user-info <replaceable > user</replaceable> </term>
2006-07-20 00:39:44 +04:00
<listitem > <para > Get user info.
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2006-07-20 00:39:44 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -I|--WINS-by-ip <replaceable > ip</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > The <parameter > -I</parameter> option
2004-04-07 14:15:11 +04:00
queries <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> to send a node status
request to get the NetBIOS name associated with the IP address
specified by the <parameter > ip</parameter> parameter.
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -K|--krb5auth <replaceable > username%password</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Attempt to authenticate a user via Kerberos.
2006-07-20 00:39:44 +04:00
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
2013-11-14 19:23:20 +04:00
<varlistentry >
<term > --krb5ccname <replaceable > KRB5CCNAME</replaceable> </term>
2019-08-29 22:29:47 +03:00
<listitem > <para > Allows one to request a specific kerberos credential
2013-11-14 19:23:20 +04:00
cache type used for authentication.
</para> </listitem>
</varlistentry>
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > --lanman</term>
<listitem > <para > Use lanman cryptography for user authentication.
</para> </listitem>
</varlistentry>
2013-11-14 19:29:10 +04:00
<varlistentry >
<term > --logoff</term>
<listitem > <para > Logoff a user.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --logoff-uid <replaceable > UID</replaceable> </term>
<listitem > <para > Define user uid used during logoff request.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --logoff-user <replaceable > USERNAME</replaceable> </term>
<listitem > <para > Define username used during logoff request.
</para> </listitem>
</varlistentry>
2013-11-14 19:33:19 +04:00
<varlistentry >
<term > --lookup-sids <replaceable > SID1,SID2...</replaceable> </term>
<listitem > <para > Looks up SIDs. SIDs must be specified as ASCII strings in the traditional Microsoft
format. For example, S-1-5-21-1455342024-3071081365-2475485837-500.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -m|--trusted-domains</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Produce a list of domains trusted by the
2004-04-07 14:15:11 +04:00
Windows NT server <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> contacts
when resolving names. This list does not include the Windows
2004-04-07 14:15:11 +04:00
NT domain the server is a Primary Domain Controller for.
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -n|--name-to-sid <replaceable > name</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > The <parameter > -n</parameter> option
2004-04-07 14:15:11 +04:00
queries <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> for the SID
associated with the name specified. Domain names can be specified
before the user name by using the winbind separator character.
2004-04-07 14:15:11 +04:00
For example CWDOM1/Administrator refers to the Administrator
2007-08-21 02:47:12 +04:00
user in the domain CWDOM1. If no domain is specified then the
2004-04-07 14:15:11 +04:00
domain used is the one specified in the <citerefentry > <refentrytitle > smb.conf</refentrytitle>
<manvolnum > 5</manvolnum> </citerefentry> <parameter > workgroup
</parameter> parameter. </para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -N|--WINS-by-name <replaceable > name</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > The <parameter > -N</parameter> option
2004-04-07 14:15:11 +04:00
queries <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> to query the WINS
server for the IP address associated with the NetBIOS name
specified by the <parameter > name</parameter> parameter.
</para> </listitem>
</varlistentry>
2016-11-14 18:38:29 +03:00
<varlistentry >
<term > --ntlmv1</term>
<listitem > <para > Use NTLMv1 cryptography for user authentication.
</para> </listitem>
</varlistentry>
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > --ntlmv2</term>
2016-11-14 18:38:29 +03:00
<listitem > <para > Use NTLMv2 cryptography for user
authentication. NTLMv2 is the default method, this
option is only maintained for compatibility.
2011-02-23 17:48:23 +03:00
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --online-status <replaceable > domain</replaceable> </term>
2018-03-08 17:40:56 +03:00
<listitem > <para > Display whether winbind currently maintains an
active connection or not. An optional domain
argument limits the output to the online status
of a given domain.
2011-02-23 17:48:23 +03:00
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --own-domain</term>
<listitem > <para > List own domain.
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
2013-11-14 19:36:21 +04:00
<varlistentry >
<term > --pam-logon <replaceable > username%password</replaceable> </term>
<listitem > <para > Attempt to authenticate a user in the same way
pam_winbind would do.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -p|--ping</term>
2008-09-04 13:25:55 +04:00
<listitem > <para > Check whether <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> is still alive.
2004-04-07 14:15:11 +04:00
Prints out either 'succeeded' or 'failed'.
</para> </listitem>
</varlistentry>
2010-12-04 20:47:56 +03:00
<varlistentry >
<term > -P|--ping-dc</term>
<listitem > <para > Issue a no-effect command to our DC. This
checks if our secure channel connection to our domain
controller is still alive. It has much less impact than
wbinfo -t.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -r|--user-groups <replaceable > username</replaceable> </term>
2018-02-14 14:05:16 +03:00
<listitem >
<para >
Try to obtain the list of UNIX group ids to which the
user belongs. This only works for users defined on a
Domain Controller.
</para>
<para > There are two scenaries:</para>
<orderedlist >
<listitem >
<para >
User authenticated: When the user has been
authenticated, the access token for the user is
cached. The correct group memberships are then
returned from the cached user token (which can
be outdated).
</para>
</listitem>
<listitem >
<para >
User *NOT* authenticated: The information is
queries from the domain controller using the
machine account credentials which have limited
permissions. The result is normally incomplete
and can be also incorrect.
</para> </listitem>
</orderedlist>
</listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
2007-08-21 02:47:12 +04:00
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > -R|--lookup-rids <replaceable > rid1, rid2, rid3...</replaceable> </term>
<listitem > <para > Converts RIDs to names. Uses a comma separated
list of rids.
</para> </listitem>
</varlistentry>
2013-11-14 19:40:56 +04:00
<varlistentry >
<term > --remove-gid-mapping <replaceable > GID,SID</replaceable> </term>
<listitem > <para > Removes an existing GID to SID mapping from the database.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --remove-uid-mapping <replaceable > UID,SID</replaceable> </term>
<listitem > <para > Removes an existing UID to SID mapping from the database.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -s|--sid-to-name <replaceable > sid</replaceable> </term>
2004-04-07 14:15:11 +04:00
<listitem > <para > Use <parameter > -s</parameter> to resolve
a SID to a name. This is the inverse of the <parameter > -n
2007-08-21 02:47:12 +04:00
</parameter> option above. SIDs must be specified as ASCII strings
2004-04-07 14:15:11 +04:00
in the traditional Microsoft format. For example,
S-1-5-21-1455342024-3071081365-2475485837-500. </para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > --separator</term>
<listitem > <para > Get the active winbind separator.
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2013-11-14 20:13:38 +04:00
<varlistentry >
<term > --sequence</term>
<listitem > <para > This command has been deprecated. Please use
the --online-status option instead.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > --set-auth-user <replaceable > username%password</replaceable> </term>
<listitem > <para > Store username and password used by <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum>
</citerefentry> during session setup to a domain controller. This enables
2004-04-07 14:15:11 +04:00
winbindd to operate in a Windows 2000 domain with Restrict
2007-10-02 12:19:40 +04:00
Anonymous turned on (a.k.a. Permissions compatible with
2004-04-07 14:15:11 +04:00
Windows 2000 servers only).
</para> </listitem>
</varlistentry>
2013-11-14 19:42:56 +04:00
<varlistentry >
<term > --set-gid-mapping <replaceable > GID,SID</replaceable> </term>
<listitem > <para > Create a GID to SID mapping in the database.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --set-uid-mapping <replaceable > UID,SID</replaceable> </term>
<listitem > <para > Create a UID to SID mapping in the database.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -S|--sid-to-uid <replaceable > sid</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Convert a SID to a UNIX user id. If the SID
2004-04-07 14:15:11 +04:00
does not correspond to a UNIX user mapped by <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum>
</citerefentry> then the operation will fail. </para> </listitem>
</varlistentry>
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > --sid-aliases <replaceable > sid</replaceable> </term>
<listitem > <para > Get SID aliases for a given SID.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --sid-to-fullname <replaceable > sid</replaceable> </term>
<listitem > <para > Converts a SID to a full username
(DOMAIN\username).
</para> </listitem>
</varlistentry>
2013-11-14 20:18:40 +04:00
<varlistentry >
<term > --sids-to-unix-ids <replaceable > sid1,sid2,sid3...</replaceable> </term>
<listitem > <para > Resolve SIDs to Unix IDs.
SIDs must be specified as ASCII strings
in the traditional Microsoft format. For example,
S-1-5-21-1455342024-3071081365-2475485837-500. </para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -t|--check-secret</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Verify that the workstation trust account
2004-04-07 14:15:11 +04:00
created when the Samba server is added to the Windows NT
2009-10-13 14:24:57 +04:00
domain is working. May be used in conjunction with
<option > domain</option> in order to verify interdomain
trust accounts.</para> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -u|--domain-users</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > This option will list all users available
2004-04-07 14:15:11 +04:00
in the Windows NT domain for which the <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> daemon is operating in. Users in all trusted domains
2013-07-17 18:13:22 +04:00
can be listed with the --domain='*' option. Note that this operation does not assign
2004-04-07 14:15:11 +04:00
user ids to any users that have not already been seen by <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum> </citerefentry>
.</para> </listitem>
</varlistentry>
2007-08-13 02:41:24 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > --uid-info <replaceable > uid</replaceable> </term>
<listitem > <para > Get user info for the user connected to
2007-08-13 02:57:04 +04:00
user id UID.</para> </listitem>
2007-08-13 02:41:24 +04:00
</varlistentry>
2011-02-23 17:48:23 +03:00
<varlistentry >
<term > --usage</term>
<listitem > <para > Print brief help overview.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > --user-domgroups <replaceable > sid</replaceable> </term>
2006-07-20 00:39:44 +04:00
<listitem > <para > Get user domain groups.
</para> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
2007-08-21 02:47:12 +04:00
2011-08-05 14:25:52 +04:00
<varlistentry >
<term > --user-sidinfo <replaceable > sid</replaceable> </term>
<listitem > <para > Get user info by sid.
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > --user-sids <replaceable > sid</replaceable> </term>
2006-07-20 00:39:44 +04:00
<listitem > <para > Get user group SIDs for user.
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -U|--uid-to-sid <replaceable > uid</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Try to convert a UNIX user id to a Windows NT
2006-07-20 00:39:44 +04:00
SID. If the uid specified does not refer to one within
2011-05-31 02:26:26 +04:00
the idmap range then the operation will fail. </para> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
2007-08-21 02:47:12 +04:00
2008-04-01 00:40:24 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > --verbose</term>
<listitem > <para >
Print additional information about the query results.
</para> </listitem>
2008-04-01 00:40:24 +04:00
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2008-09-04 13:25:55 +04:00
<term > -Y|--sid-to-gid <replaceable > sid</replaceable> </term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Convert a SID to a UNIX group id. If the SID
2004-04-07 14:15:11 +04:00
does not correspond to a UNIX group mapped by <citerefentry >
2007-08-21 02:47:12 +04:00
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum> </citerefentry> then
2004-04-07 14:15:11 +04:00
the operation will fail. </para> </listitem>
</varlistentry>
&stdarg.version;
&stdarg.help;
</variablelist>
</refsect1>
<refsect1 >
<title > EXIT STATUS</title>
2007-08-21 02:47:12 +04:00
<para > The wbinfo program returns 0 if the operation
2004-04-07 14:15:11 +04:00
succeeded, or 1 if the operation failed. If the <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum>
2007-08-21 02:47:12 +04:00
</citerefentry> daemon is not working <command > wbinfo</command> will always return
2004-04-07 14:15:11 +04:00
failure. </para>
</refsect1>
<refsect1 >
<title > VERSION</title>
2017-12-13 03:38:25 +03:00
<para > This man page is part of version &doc.version; of
2004-04-07 14:15:11 +04:00
the Samba suite.</para>
</refsect1>
<refsect1 >
<title > SEE ALSO</title>
<para > <citerefentry > <refentrytitle > winbindd</refentrytitle>
2004-10-02 14:46:13 +04:00
<manvolnum > 8</manvolnum> </citerefentry> and <citerefentry > <refentrytitle > ntlm_auth</refentrytitle>
<manvolnum > 1</manvolnum> </citerefentry> </para>
2004-04-07 14:15:11 +04:00
</refsect1>
<refsect1 >
<title > AUTHOR</title>
2007-08-21 02:47:12 +04:00
<para > The original Samba software and related utilities
2004-04-07 14:15:11 +04:00
were created by Andrew Tridgell. Samba is now developed
2007-08-21 02:47:12 +04:00
by the Samba Team as an Open Source project similar
2004-04-07 14:15:11 +04:00
to the way the Linux kernel is developed.</para>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<para > <command > wbinfo</command> and <command > winbindd</command>
were written by Tim Potter.</para>
2007-08-21 02:47:12 +04:00
<para > The conversion to DocBook for Samba 2.2 was done
2004-04-07 14:15:11 +04:00
by Gerald Carter. The conversion to DocBook XML 4.2 for Samba
3.0 was done by Alexander Bokovoy.</para>
</refsect1>
</refentry>