2004-04-07 14:15:11 +04:00
<?xml version="1.0" encoding="iso-8859-1"?>
2005-03-12 22:33:59 +03:00
<!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
2004-04-07 14:15:11 +04:00
<refentry id= "wbinfo.1" >
<refmeta >
<refentrytitle > wbinfo</refentrytitle>
<manvolnum > 1</manvolnum>
</refmeta>
<refnamediv >
<refname > wbinfo</refname>
<refpurpose > Query information from winbind daemon</refpurpose>
</refnamediv>
<refsynopsisdiv >
<cmdsynopsis >
<command > wbinfo</command>
<arg choice= "opt" > -a user%password</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --all-domains</arg>
<arg choice= "opt" > --allocate-gid</arg>
<arg choice= "opt" > --allocate-uid</arg>
<arg choice= "opt" > -D domain</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > --domain domain</arg>
<arg choice= "opt" > -g</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --getdcname domain</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > --get-auth-user</arg>
<arg choice= "opt" > -G gid</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > -h</arg>
<arg choice= "opt" > -i user</arg>
<arg choice= "opt" > -I ip</arg>
<arg choice= "opt" > -K user%password</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -m</arg>
<arg choice= "opt" > -n name</arg>
<arg choice= "opt" > -N netbios-name</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --own-domain</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -p</arg>
<arg choice= "opt" > -r user</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > -s sid</arg>
<arg choice= "opt" > --separator</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > --sequence</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --set-auth-user user%password</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -S sid</arg>
<arg choice= "opt" > -t</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > -u</arg>
2007-08-13 02:57:04 +04:00
<arg choice= "opt" > --uid-info uid</arg>
2006-07-20 00:39:44 +04:00
<arg choice= "opt" > --user-domgroups sid</arg>
<arg choice= "opt" > --user-sids sid</arg>
<arg choice= "opt" > -U uid</arg>
<arg choice= "opt" > -V</arg>
2004-04-07 14:15:11 +04:00
<arg choice= "opt" > -Y sid</arg>
</cmdsynopsis>
</refsynopsisdiv>
<refsect1 >
<title > DESCRIPTION</title>
2004-04-27 18:43:44 +04:00
<para > This tool is part of the <citerefentry > <refentrytitle > samba</refentrytitle>
2004-04-07 14:15:11 +04:00
<manvolnum > 7</manvolnum> </citerefentry> suite.</para>
2007-08-21 02:47:12 +04:00
<para > The <command > wbinfo</command> program queries and returns information
2004-04-07 14:15:11 +04:00
created and used by the <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> daemon. </para>
<para > The <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> daemon must be configured
and running for the <command > wbinfo</command> program to be able
2004-04-07 14:15:11 +04:00
to return information.</para>
</refsect1>
<refsect1 >
<title > OPTIONS</title>
2007-08-21 02:47:12 +04:00
<variablelist >
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -a|--authenticate username%password</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Attempt to authenticate a user via winbindd.
2004-04-07 14:15:11 +04:00
This checks both authenticaion methods and reports its results.
2004-10-02 14:46:13 +04:00
</para> <note > <para > Do not be tempted to use this
functionality for authentication in third-party
applications. Instead use <citerefentry > <refentrytitle > ntlm_auth</refentrytitle>
<manvolnum > 1</manvolnum> </citerefentry> .</para> </note> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --allocate-gid</term>
<listitem > <para > Get a new GID out of idmap
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --allocate-uid</term>
<listitem > <para > Get a new UID out of idmap
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > --all-domains</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > List all domains (trusted and
2006-07-20 00:39:44 +04:00
own domain).
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
<term > --domain name</term>
<listitem > <para > This parameter sets the domain on which any specified
operations will performed. If special domain name '.' is used to represent
2007-08-21 02:47:12 +04:00
the current domain to which winbindd belongs. Currently only the
2004-04-07 14:15:11 +04:00
<option > --sequence</option> ,
<option > -u</option> , and <option > -g</option> options honor this parameter.
</para> </listitem>
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -D|--domain-info domain</term>
<listitem > <para > Show most of the info we have about the domain.
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > -g|--domain-groups</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > This option will list all groups available
2004-04-27 18:43:44 +04:00
in the Windows NT domain for which the <citerefentry > <refentrytitle > samba</refentrytitle>
2004-04-07 14:15:11 +04:00
<manvolnum > 7</manvolnum> </citerefentry> daemon is operating in. Groups in all trusted domains
2007-08-21 02:47:12 +04:00
will also be listed. Note that this operation does not assign
group ids to any groups that have not already been
2004-04-07 14:15:11 +04:00
seen by <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> . </para> </listitem>
</varlistentry>
<varlistentry >
<term > --get-auth-user</term>
<listitem > <para > Print username and password used by winbindd
2007-08-21 02:47:12 +04:00
during session setup to a domain controller. Username
and password can be set using <option > --set-auth-user</option> .
2006-07-20 00:39:44 +04:00
Only available for root.</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > --getdcname domain</term>
<listitem > <para > Get the DC name for the specified domain.
</para> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -G|--gid-to-sid gid</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Try to convert a UNIX group id to a Windows
NT SID. If the gid specified does not refer to one within
2004-04-07 14:15:11 +04:00
the idmap gid range then the operation will fail. </para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -i|--user-info user</term>
<listitem > <para > Get user info.
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > -I|--WINS-by-ip ip</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > The <parameter > -I</parameter> option
2004-04-07 14:15:11 +04:00
queries <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> to send a node status
request to get the NetBIOS name associated with the IP address
specified by the <parameter > ip</parameter> parameter.
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > -K|--krb5auth username%password</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Attempt to authenticate a user via Kerberos.
2006-07-20 00:39:44 +04:00
</para> </listitem>
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -m|--trusted-domains</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Produce a list of domains trusted by the
2004-04-07 14:15:11 +04:00
Windows NT server <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> contacts
when resolving names. This list does not include the Windows
2004-04-07 14:15:11 +04:00
NT domain the server is a Primary Domain Controller for.
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -n|--name-to-sid name</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > The <parameter > -n</parameter> option
2004-04-07 14:15:11 +04:00
queries <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> for the SID
associated with the name specified. Domain names can be specified
before the user name by using the winbind separator character.
2004-04-07 14:15:11 +04:00
For example CWDOM1/Administrator refers to the Administrator
2007-08-21 02:47:12 +04:00
user in the domain CWDOM1. If no domain is specified then the
2004-04-07 14:15:11 +04:00
domain used is the one specified in the <citerefentry > <refentrytitle > smb.conf</refentrytitle>
<manvolnum > 5</manvolnum> </citerefentry> <parameter > workgroup
</parameter> parameter. </para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -N|--WINS-by-name name</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > The <parameter > -N</parameter> option
2004-04-07 14:15:11 +04:00
queries <citerefentry > <refentrytitle > winbindd</refentrytitle>
<manvolnum > 8</manvolnum> </citerefentry> to query the WINS
server for the IP address associated with the NetBIOS name
specified by the <parameter > name</parameter> parameter.
</para> </listitem>
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --own-domain</term>
<listitem > <para > List own domain.
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -p|--ping</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Check whether winbindd is still alive.
2004-04-07 14:15:11 +04:00
Prints out either 'succeeded' or 'failed'.
</para> </listitem>
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -r|--user-groups username</term>
2004-04-07 14:15:11 +04:00
<listitem > <para > Try to obtain the list of UNIX group ids
to which the user belongs. This only works for users
defined on a Domain Controller.
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -s|--sid-to-name sid</term>
2004-04-07 14:15:11 +04:00
<listitem > <para > Use <parameter > -s</parameter> to resolve
a SID to a name. This is the inverse of the <parameter > -n
2007-08-21 02:47:12 +04:00
</parameter> option above. SIDs must be specified as ASCII strings
2004-04-07 14:15:11 +04:00
in the traditional Microsoft format. For example,
S-1-5-21-1455342024-3071081365-2475485837-500. </para> </listitem>
</varlistentry>
2006-07-20 00:39:44 +04:00
<varlistentry >
<term > --separator</term>
<listitem > <para > Get the active winbind separator.
</para> </listitem>
</varlistentry>
<varlistentry >
<term > --sequence</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Show sequence numbers of
2006-07-20 00:39:44 +04:00
all known domains</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
<term > --set-auth-user username%password</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Store username and password used by winbindd
2004-04-07 14:15:11 +04:00
during session setup to a domain controller. This enables
winbindd to operate in a Windows 2000 domain with Restrict
2007-10-02 12:19:40 +04:00
Anonymous turned on (a.k.a. Permissions compatible with
2004-04-07 14:15:11 +04:00
Windows 2000 servers only).
</para> </listitem>
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -S|--sid-to-uid sid</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Convert a SID to a UNIX user id. If the SID
2004-04-07 14:15:11 +04:00
does not correspond to a UNIX user mapped by <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum>
</citerefentry> then the operation will fail. </para> </listitem>
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -t|--check-secret</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Verify that the workstation trust account
2004-04-07 14:15:11 +04:00
created when the Samba server is added to the Windows NT
domain is working. </para> </listitem>
</varlistentry>
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -u|--domain-users</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > This option will list all users available
2004-04-07 14:15:11 +04:00
in the Windows NT domain for which the <citerefentry > <refentrytitle > winbindd</refentrytitle>
2007-08-21 02:47:12 +04:00
<manvolnum > 8</manvolnum> </citerefentry> daemon is operating in. Users in all trusted domains
will also be listed. Note that this operation does not assign
2004-04-07 14:15:11 +04:00
user ids to any users that have not already been seen by <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum> </citerefentry>
.</para> </listitem>
</varlistentry>
2007-08-13 02:41:24 +04:00
<varlistentry >
2007-08-13 02:57:04 +04:00
<term > --uid-info UID</term>
2007-08-13 02:41:24 +04:00
<listitem > <para > Get user info for the user conencted to
2007-08-13 02:57:04 +04:00
user id UID.</para> </listitem>
2007-08-13 02:41:24 +04:00
</varlistentry>
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --user-domgroups SID</term>
<listitem > <para > Get user domain groups.
</para> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > --user-sids SID</term>
<listitem > <para > Get user group SIDs for user.
2004-04-07 14:15:11 +04:00
</para> </listitem>
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -U|--uid-to-sid uid</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Try to convert a UNIX user id to a Windows NT
2006-07-20 00:39:44 +04:00
SID. If the uid specified does not refer to one within
the idmap uid range then the operation will fail. </para> </listitem>
2004-04-07 14:15:11 +04:00
</varlistentry>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<varlistentry >
2006-07-20 00:39:44 +04:00
<term > -Y|--sid-to-gid sid</term>
2007-08-21 02:47:12 +04:00
<listitem > <para > Convert a SID to a UNIX group id. If the SID
2004-04-07 14:15:11 +04:00
does not correspond to a UNIX group mapped by <citerefentry >
2007-08-21 02:47:12 +04:00
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum> </citerefentry> then
2004-04-07 14:15:11 +04:00
the operation will fail. </para> </listitem>
</varlistentry>
&stdarg.version;
&stdarg.help;
</variablelist>
</refsect1>
<refsect1 >
<title > EXIT STATUS</title>
2007-08-21 02:47:12 +04:00
<para > The wbinfo program returns 0 if the operation
2004-04-07 14:15:11 +04:00
succeeded, or 1 if the operation failed. If the <citerefentry >
<refentrytitle > winbindd</refentrytitle> <manvolnum > 8</manvolnum>
2007-08-21 02:47:12 +04:00
</citerefentry> daemon is not working <command > wbinfo</command> will always return
2004-04-07 14:15:11 +04:00
failure. </para>
</refsect1>
<refsect1 >
<title > VERSION</title>
2007-08-21 02:47:12 +04:00
<para > This man page is correct for version 3.0 of
2004-04-07 14:15:11 +04:00
the Samba suite.</para>
</refsect1>
<refsect1 >
<title > SEE ALSO</title>
<para > <citerefentry > <refentrytitle > winbindd</refentrytitle>
2004-10-02 14:46:13 +04:00
<manvolnum > 8</manvolnum> </citerefentry> and <citerefentry > <refentrytitle > ntlm_auth</refentrytitle>
<manvolnum > 1</manvolnum> </citerefentry> </para>
2004-04-07 14:15:11 +04:00
</refsect1>
<refsect1 >
<title > AUTHOR</title>
2007-08-21 02:47:12 +04:00
<para > The original Samba software and related utilities
2004-04-07 14:15:11 +04:00
were created by Andrew Tridgell. Samba is now developed
2007-08-21 02:47:12 +04:00
by the Samba Team as an Open Source project similar
2004-04-07 14:15:11 +04:00
to the way the Linux kernel is developed.</para>
2007-08-21 02:47:12 +04:00
2004-04-07 14:15:11 +04:00
<para > <command > wbinfo</command> and <command > winbindd</command>
were written by Tim Potter.</para>
2007-08-21 02:47:12 +04:00
<para > The conversion to DocBook for Samba 2.2 was done
2004-04-07 14:15:11 +04:00
by Gerald Carter. The conversion to DocBook XML 4.2 for Samba
3.0 was done by Alexander Bokovoy.</para>
</refsect1>
</refentry>