mirror of
https://github.com/samba-team/samba.git
synced 2025-01-17 02:05:21 +03:00
removing smbgroupedit man page
(This used to be commit 9134feb9f62e852dd6c900890e01062983995d01)
This commit is contained in:
Gerald Carter
parent
ce9af4e049
commit
2b8b54061f
@ -21,7 +21,7 @@ MANPAGES_NAMES=findsmb.1 smbclient.1 \
|
||||
smbpasswd.8 testprns.1 \
|
||||
smb.conf.5 wbinfo.1 pdbedit.8 \
|
||||
smbcacls.1 smbsh.1 winbindd.8 \
|
||||
smbgroupedit.8 vfstest.1
|
||||
vfstest.1
|
||||
|
||||
## This part contains only rules. You shouldn't need to change it
|
||||
## if you are adding docs
|
||||
|
||||
@ -1,267 +0,0 @@
|
||||
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN">
|
||||
<refentry id="smbgroupedit">
|
||||
|
||||
<refmeta>
|
||||
<refentrytitle>smbgroupedit</refentrytitle>
|
||||
<manvolnum>8</manvolnum>
|
||||
</refmeta>
|
||||
|
||||
|
||||
<!-- ****************************************************
|
||||
** Name and Options **
|
||||
**************************************************** -->
|
||||
<refnamediv>
|
||||
<refname>smbgroupedit</refname>
|
||||
<refpurpose>Query/set/change UNIX - Windows NT group mapping</refpurpose>
|
||||
</refnamediv>
|
||||
|
||||
<refsynopsisdiv>
|
||||
<cmdsynopsis>
|
||||
<command>smbroupedit</command>
|
||||
<arg choice="opt">-v [l|s]</arg>
|
||||
<arg choice="opt">-a UNIX-groupname [-d NT-groupname|-p privilege|]</arg>
|
||||
</cmdsynopsis>
|
||||
</refsynopsisdiv>
|
||||
|
||||
|
||||
|
||||
<!-- ****************************************************
|
||||
** Description **
|
||||
**************************************************** -->
|
||||
<refsect1>
|
||||
|
||||
<title>DESCRIPTION</title>
|
||||
|
||||
<para>
|
||||
This program is part of the <ulink url="samba.7.html">Samba</ulink>
|
||||
suite.
|
||||
</para>
|
||||
|
||||
<para>
|
||||
The smbgroupedit command allows for mapping unix groups
|
||||
to NT Builtin, Domain, or Local groups. Also
|
||||
allows setting privileges for that group, such as saAddUser,
|
||||
etc.
|
||||
</para>
|
||||
|
||||
</refsect1>
|
||||
|
||||
<refsect1>
|
||||
<title>OPTIONS</title>
|
||||
|
||||
<variablelist>
|
||||
<varlistentry>
|
||||
<term>-v[l|s]</term>
|
||||
<listitem><para>This option will list all groups available
|
||||
in the Windows NT domain in which samba is operating.
|
||||
</para>
|
||||
|
||||
<variablelist>
|
||||
<varlistentry>
|
||||
<term>-l</term>
|
||||
<listitem><para>give a long listing, of the format:</para>
|
||||
|
||||
<para><programlisting>
|
||||
"NT Group Name"
|
||||
SID :
|
||||
Unix group :
|
||||
Group type :
|
||||
Comment :
|
||||
Privilege :
|
||||
</programlisting></para>
|
||||
|
||||
<para>For examples,</para>
|
||||
<para><programlisting>
|
||||
Users
|
||||
SID : S-1-5-32-545
|
||||
Unix group: -1
|
||||
Group type: Local group
|
||||
Comment :
|
||||
Privilege : No privilege
|
||||
</programlisting></para>
|
||||
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry>
|
||||
<term>-s</term>
|
||||
<listitem><para>display a short listing of the format:</para>
|
||||
|
||||
<para><programlisting>
|
||||
NTGroupName(SID) -> UnixGroupName
|
||||
</programlisting></para>
|
||||
|
||||
<para>For example,</para>
|
||||
|
||||
<para><programlisting>
|
||||
Users (S-1-5-32-545) -> -1
|
||||
</programlisting></para>
|
||||
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
</variablelist>
|
||||
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
</variablelist>
|
||||
</refsect1>
|
||||
|
||||
|
||||
|
||||
<!-- ****************************************************
|
||||
**************************************************** -->
|
||||
<refsect1>
|
||||
<title>FILES</title>
|
||||
|
||||
<para></para>
|
||||
|
||||
</refsect1>
|
||||
|
||||
|
||||
|
||||
<!-- ****************************************************
|
||||
**************************************************** -->
|
||||
<refsect1>
|
||||
|
||||
<title>EXIT STATUS</title>
|
||||
|
||||
<para>
|
||||
<command>smbgroupedit</command> returns a status of 0 if the
|
||||
operation completed successfully, and a value of 1 in the event
|
||||
of a failure.
|
||||
</para>
|
||||
|
||||
</refsect1>
|
||||
|
||||
|
||||
|
||||
|
||||
<!-- ****************************************************
|
||||
**************************************************** -->
|
||||
<refsect1>
|
||||
|
||||
<title>EXAMPLES</title>
|
||||
|
||||
|
||||
<para>
|
||||
To make a subset of your samba PDC users members of
|
||||
the 'Domain Admins' Global group:
|
||||
</para>
|
||||
|
||||
<orderedlist>
|
||||
|
||||
<listitem><para>create a unix group (usually in
|
||||
<filename>/etc/group</filename>), let's call it <constant>domadm</constant>.
|
||||
</para></listitem>
|
||||
|
||||
<listitem><para>add to this group the users that you want to be
|
||||
domain administrators. For example if you want joe, john and mary,
|
||||
your entry in <filename>/etc/group</filename> will look like:
|
||||
</para>
|
||||
|
||||
<para>domadm:x:502:joe,john,mary</para>
|
||||
</listitem>
|
||||
|
||||
<listitem><para>map this domadm group to the 'domain admins' group:
|
||||
</para>
|
||||
<orderedlist>
|
||||
<listitem><para>Get the SID for the Windows NT "Domain Admins"
|
||||
group:</para>
|
||||
|
||||
<para><programlisting>
|
||||
<prompt>root# </prompt><command>smbgroupedit -vs | grep "Domain Admins"</command>
|
||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1
|
||||
</programlisting></para>
|
||||
</listitem>
|
||||
|
||||
<listitem><para>map the unix domadm group to the Windows NT
|
||||
"Domain Admins" group, by running the command:
|
||||
</para>
|
||||
|
||||
<para><programlisting>
|
||||
<prompt>root# </prompt><command>smbgroupedit \
|
||||
-c S-1-5-21-1108995562-3116817432-1375597819-512 \
|
||||
-u domadm -td</command>
|
||||
</programlisting></para>
|
||||
|
||||
<para>
|
||||
<emphasis>warning:</emphasis> don't copy and paste this sample, the
|
||||
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
|
||||
</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
|
||||
<para>
|
||||
To verify that your mapping has taken effect:
|
||||
</para>
|
||||
|
||||
<para><programlisting>
|
||||
<prompt>root# </prompt><command>smbgroupedit -vs|grep "Domain Admins"</command>
|
||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm
|
||||
</programlisting></para>
|
||||
|
||||
<para>
|
||||
To give access to a certain directory on a domain member machine (an
|
||||
NT/W2K or a samba server running winbind) to some users who are member
|
||||
of a group on your samba PDC, flag that group as a domain group:
|
||||
</para>
|
||||
|
||||
<para><programlisting>
|
||||
<prompt>root# </prompt><command>smbgroupedit -a unixgroup -td</command>
|
||||
</programlisting></para>
|
||||
|
||||
|
||||
|
||||
</refsect1>
|
||||
|
||||
|
||||
|
||||
|
||||
<!-- ****************************************************
|
||||
**************************************************** -->
|
||||
<refsect1>
|
||||
|
||||
<title>VERSION</title>
|
||||
|
||||
<para>
|
||||
This man page is correct for the 3.0alpha releases of
|
||||
the Samba suite.
|
||||
</para>
|
||||
</refsect1>
|
||||
|
||||
<!-- ****************************************************
|
||||
**************************************************** -->
|
||||
|
||||
<refsect1>
|
||||
<title>SEE ALSO</title>
|
||||
|
||||
<para>
|
||||
<ulink url="smb.conf.5.html">smb.conf(5)</ulink>
|
||||
</para>
|
||||
|
||||
</refsect1>
|
||||
|
||||
|
||||
<!-- ****************************************************
|
||||
**************************************************** -->
|
||||
|
||||
<refsect1>
|
||||
<title>AUTHOR</title>
|
||||
|
||||
<para>
|
||||
The original Samba software and related utilities
|
||||
were created by Andrew Tridgell. Samba is now developed
|
||||
by the Samba Team as an Open Source project similar
|
||||
to the way the Linux kernel is developed.
|
||||
</para>
|
||||
|
||||
<para>
|
||||
<command>smbgroupedit</command> was written by Jean Francois Micouleau.
|
||||
The current set of manpages and documentation is maintained
|
||||
by the Samba Team in the same fashion as the Samba source code.</para>
|
||||
</refsect1>
|
||||
|
||||
</refentry>
|
||||
@ -1,401 +0,0 @@
|
||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
|
||||
<HTML
|
||||
><HEAD
|
||||
><TITLE
|
||||
>smbgroupedit</TITLE
|
||||
><META
|
||||
NAME="GENERATOR"
|
||||
CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
|
||||
"></HEAD
|
||||
><BODY
|
||||
CLASS="REFENTRY"
|
||||
BGCOLOR="#FFFFFF"
|
||||
TEXT="#000000"
|
||||
LINK="#0000FF"
|
||||
VLINK="#840084"
|
||||
ALINK="#0000FF"
|
||||
><H1
|
||||
><A
|
||||
NAME="SMBGROUPEDIT">smbgroupedit</H1
|
||||
><DIV
|
||||
CLASS="REFNAMEDIV"
|
||||
><A
|
||||
NAME="AEN5"
|
||||
></A
|
||||
><H2
|
||||
>Name</H2
|
||||
>smbgroupedit -- Query/set/change UNIX - Windows NT group mapping</DIV
|
||||
><DIV
|
||||
CLASS="REFSYNOPSISDIV"
|
||||
><A
|
||||
NAME="AEN8"><H2
|
||||
>Synopsis</H2
|
||||
><P
|
||||
><B
|
||||
CLASS="COMMAND"
|
||||
>smbroupedit</B
|
||||
> [-v [l|s]] [-a UNIX-groupname [-d NT-groupname|-p privilege|]]</P
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN13"
|
||||
></A
|
||||
><H2
|
||||
>DESCRIPTION</H2
|
||||
><P
|
||||
>This program is part of the <A
|
||||
HREF="samba.7.html"
|
||||
TARGET="_top"
|
||||
>Samba</A
|
||||
>
|
||||
suite.</P
|
||||
><P
|
||||
>The smbgroupedit command allows for mapping unix groups
|
||||
to NT Builtin, Domain, or Local groups. Also
|
||||
allows setting privileges for that group, such as saAddUser,
|
||||
etc.</P
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN18"
|
||||
></A
|
||||
><H2
|
||||
>OPTIONS</H2
|
||||
><P
|
||||
></P
|
||||
><DIV
|
||||
CLASS="VARIABLELIST"
|
||||
><DL
|
||||
><DT
|
||||
>-v[l|s]</DT
|
||||
><DD
|
||||
><P
|
||||
>This option will list all groups available
|
||||
in the Windows NT domain in which samba is operating.
|
||||
</P
|
||||
><P
|
||||
></P
|
||||
><DIV
|
||||
CLASS="VARIABLELIST"
|
||||
><DL
|
||||
><DT
|
||||
>-l</DT
|
||||
><DD
|
||||
><P
|
||||
>give a long listing, of the format:</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="90%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
>"NT Group Name"
|
||||
SID :
|
||||
Unix group :
|
||||
Group type :
|
||||
Comment :
|
||||
Privilege :</PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
><P
|
||||
>For examples,</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="90%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
>Users
|
||||
SID : S-1-5-32-545
|
||||
Unix group: -1
|
||||
Group type: Local group
|
||||
Comment :
|
||||
Privilege : No privilege</PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
></DD
|
||||
><DT
|
||||
>-s</DT
|
||||
><DD
|
||||
><P
|
||||
>display a short listing of the format:</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="90%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
>NTGroupName(SID) -> UnixGroupName</PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
><P
|
||||
>For example,</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="90%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
>Users (S-1-5-32-545) -> -1</PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
></DD
|
||||
></DL
|
||||
></DIV
|
||||
></DD
|
||||
></DL
|
||||
></DIV
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN44"
|
||||
></A
|
||||
><H2
|
||||
>FILES</H2
|
||||
><P
|
||||
></P
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN47"
|
||||
></A
|
||||
><H2
|
||||
>EXIT STATUS</H2
|
||||
><P
|
||||
><B
|
||||
CLASS="COMMAND"
|
||||
>smbgroupedit</B
|
||||
> returns a status of 0 if the
|
||||
operation completed successfully, and a value of 1 in the event
|
||||
of a failure.</P
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN51"
|
||||
></A
|
||||
><H2
|
||||
>EXAMPLES</H2
|
||||
><P
|
||||
>To make a subset of your samba PDC users members of
|
||||
the 'Domain Admins' Global group:</P
|
||||
><P
|
||||
></P
|
||||
><OL
|
||||
TYPE="1"
|
||||
><LI
|
||||
><P
|
||||
>create a unix group (usually in
|
||||
<TT
|
||||
CLASS="FILENAME"
|
||||
>/etc/group</TT
|
||||
>), let's call it <TT
|
||||
CLASS="CONSTANT"
|
||||
>domadm</TT
|
||||
>.
|
||||
</P
|
||||
></LI
|
||||
><LI
|
||||
><P
|
||||
>add to this group the users that you want to be
|
||||
domain administrators. For example if you want joe, john and mary,
|
||||
your entry in <TT
|
||||
CLASS="FILENAME"
|
||||
>/etc/group</TT
|
||||
> will look like:
|
||||
</P
|
||||
><P
|
||||
>domadm:x:502:joe,john,mary</P
|
||||
></LI
|
||||
><LI
|
||||
><P
|
||||
>map this domadm group to the 'domain admins' group:
|
||||
</P
|
||||
><P
|
||||
></P
|
||||
><OL
|
||||
TYPE="a"
|
||||
><LI
|
||||
><P
|
||||
>Get the SID for the Windows NT "Domain Admins"
|
||||
group:</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="90%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
><TT
|
||||
CLASS="PROMPT"
|
||||
>root# </TT
|
||||
><B
|
||||
CLASS="COMMAND"
|
||||
>smbgroupedit -vs | grep "Domain Admins"</B
|
||||
>
|
||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1</PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
></LI
|
||||
><LI
|
||||
><P
|
||||
>map the unix domadm group to the Windows NT
|
||||
"Domain Admins" group, by running the command:
|
||||
</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="90%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
><TT
|
||||
CLASS="PROMPT"
|
||||
>root# </TT
|
||||
><B
|
||||
CLASS="COMMAND"
|
||||
>smbgroupedit \
|
||||
-c S-1-5-21-1108995562-3116817432-1375597819-512 \
|
||||
-u domadm -td</B
|
||||
></PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
><P
|
||||
> <I
|
||||
CLASS="EMPHASIS"
|
||||
>warning:</I
|
||||
> don't copy and paste this sample, the
|
||||
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
|
||||
</P
|
||||
></LI
|
||||
></OL
|
||||
></LI
|
||||
></OL
|
||||
><P
|
||||
>To verify that your mapping has taken effect:</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="100%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
><TT
|
||||
CLASS="PROMPT"
|
||||
>root# </TT
|
||||
><B
|
||||
CLASS="COMMAND"
|
||||
>smbgroupedit -vs|grep "Domain Admins"</B
|
||||
>
|
||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm</PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
><P
|
||||
>To give access to a certain directory on a domain member machine (an
|
||||
NT/W2K or a samba server running winbind) to some users who are member
|
||||
of a group on your samba PDC, flag that group as a domain group:</P
|
||||
><P
|
||||
><TABLE
|
||||
BORDER="0"
|
||||
BGCOLOR="#E0E0E0"
|
||||
WIDTH="100%"
|
||||
><TR
|
||||
><TD
|
||||
><PRE
|
||||
CLASS="PROGRAMLISTING"
|
||||
><TT
|
||||
CLASS="PROMPT"
|
||||
>root# </TT
|
||||
><B
|
||||
CLASS="COMMAND"
|
||||
>smbgroupedit -a unixgroup -td</B
|
||||
></PRE
|
||||
></TD
|
||||
></TR
|
||||
></TABLE
|
||||
></P
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN90"
|
||||
></A
|
||||
><H2
|
||||
>VERSION</H2
|
||||
><P
|
||||
>This man page is correct for the 3.0alpha releases of
|
||||
the Samba suite.</P
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN93"
|
||||
></A
|
||||
><H2
|
||||
>SEE ALSO</H2
|
||||
><P
|
||||
><A
|
||||
HREF="smb.conf.5.html"
|
||||
TARGET="_top"
|
||||
>smb.conf(5)</A
|
||||
></P
|
||||
></DIV
|
||||
><DIV
|
||||
CLASS="REFSECT1"
|
||||
><A
|
||||
NAME="AEN97"
|
||||
></A
|
||||
><H2
|
||||
>AUTHOR</H2
|
||||
><P
|
||||
>The original Samba software and related utilities
|
||||
were created by Andrew Tridgell. Samba is now developed
|
||||
by the Samba Team as an Open Source project similar
|
||||
to the way the Linux kernel is developed.</P
|
||||
><P
|
||||
><B
|
||||
CLASS="COMMAND"
|
||||
>smbgroupedit</B
|
||||
> was written by Jean Francois Micouleau.
|
||||
The current set of manpages and documentation is maintained
|
||||
by the Samba Team in the same fashion as the Samba source code.</P
|
||||
></DIV
|
||||
></BODY
|
||||
></HTML
|
||||
>
|
||||
@ -1,153 +0,0 @@
|
||||
.\" This manpage has been automatically generated by docbook2man
|
||||
.\" from a DocBook document. This tool can be found at:
|
||||
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
|
||||
.\" Please send any bug reports, improvements, comments, patches,
|
||||
.\" etc. to Steve Cheng <steve@ggi-project.org>.
|
||||
.TH "SMBGROUPEDIT" "8" "04 March 2003" "" ""
|
||||
.SH NAME
|
||||
smbgroupedit \- Query/set/change UNIX - Windows NT group mapping
|
||||
.SH SYNOPSIS
|
||||
|
||||
\fBsmbroupedit\fR [ \fB-v [l|s]\fR ] [ \fB-a UNIX-groupname [-d NT-groupname|-p privilege|]\fR ]
|
||||
|
||||
.SH "DESCRIPTION"
|
||||
.PP
|
||||
This program is part of the Samba
|
||||
suite.
|
||||
.PP
|
||||
The smbgroupedit command allows for mapping unix groups
|
||||
to NT Builtin, Domain, or Local groups. Also
|
||||
allows setting privileges for that group, such as saAddUser,
|
||||
etc.
|
||||
.SH "OPTIONS"
|
||||
.TP
|
||||
\fB-v[l|s]\fR
|
||||
This option will list all groups available
|
||||
in the Windows NT domain in which samba is operating.
|
||||
.RS
|
||||
.TP
|
||||
\fB-l\fR
|
||||
give a long listing, of the format:
|
||||
|
||||
|
||||
.nf
|
||||
"NT Group Name"
|
||||
SID :
|
||||
Unix group :
|
||||
Group type :
|
||||
Comment :
|
||||
Privilege :
|
||||
.fi
|
||||
|
||||
For examples,
|
||||
|
||||
|
||||
.nf
|
||||
Users
|
||||
SID : S-1-5-32-545
|
||||
Unix group: -1
|
||||
Group type: Local group
|
||||
Comment :
|
||||
Privilege : No privilege
|
||||
.fi
|
||||
.TP
|
||||
\fB-s\fR
|
||||
display a short listing of the format:
|
||||
|
||||
|
||||
.nf
|
||||
NTGroupName(SID) -> UnixGroupName
|
||||
.fi
|
||||
|
||||
For example,
|
||||
|
||||
|
||||
.nf
|
||||
Users (S-1-5-32-545) -> -1
|
||||
.fi
|
||||
.RE
|
||||
.SH "FILES"
|
||||
.PP
|
||||
.SH "EXIT STATUS"
|
||||
.PP
|
||||
\fBsmbgroupedit\fR returns a status of 0 if the
|
||||
operation completed successfully, and a value of 1 in the event
|
||||
of a failure.
|
||||
.SH "EXAMPLES"
|
||||
.PP
|
||||
To make a subset of your samba PDC users members of
|
||||
the 'Domain Admins' Global group:
|
||||
.TP 3
|
||||
1.
|
||||
create a unix group (usually in
|
||||
\fI/etc/group\fR), let's call it domadm.
|
||||
.TP 3
|
||||
2.
|
||||
add to this group the users that you want to be
|
||||
domain administrators. For example if you want joe, john and mary,
|
||||
your entry in \fI/etc/group\fR will look like:
|
||||
|
||||
domadm:x:502:joe,john,mary
|
||||
.TP 3
|
||||
3.
|
||||
map this domadm group to the 'domain admins' group:
|
||||
.RS
|
||||
.TP 3
|
||||
1.
|
||||
Get the SID for the Windows NT "Domain Admins"
|
||||
group:
|
||||
|
||||
|
||||
.nf
|
||||
root# \fBsmbgroupedit -vs | grep "Domain Admins"\fR
|
||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1
|
||||
.fi
|
||||
.TP 3
|
||||
2.
|
||||
map the unix domadm group to the Windows NT
|
||||
"Domain Admins" group, by running the command:
|
||||
|
||||
|
||||
.nf
|
||||
root# \fBsmbgroupedit \\
|
||||
-c S-1-5-21-1108995562-3116817432-1375597819-512 \\
|
||||
-u domadm -td\fR
|
||||
.fi
|
||||
|
||||
\fBwarning:\fR don't copy and paste this sample, the
|
||||
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
|
||||
.RE
|
||||
.PP
|
||||
To verify that your mapping has taken effect:
|
||||
.PP
|
||||
|
||||
.nf
|
||||
root# \fBsmbgroupedit -vs|grep "Domain Admins"\fR
|
||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm
|
||||
.fi
|
||||
.PP
|
||||
To give access to a certain directory on a domain member machine (an
|
||||
NT/W2K or a samba server running winbind) to some users who are member
|
||||
of a group on your samba PDC, flag that group as a domain group:
|
||||
.PP
|
||||
|
||||
.nf
|
||||
root# \fBsmbgroupedit -a unixgroup -td\fR
|
||||
.fi
|
||||
.SH "VERSION"
|
||||
.PP
|
||||
This man page is correct for the 3.0alpha releases of
|
||||
the Samba suite.
|
||||
.SH "SEE ALSO"
|
||||
.PP
|
||||
smb.conf(5)
|
||||
.SH "AUTHOR"
|
||||
.PP
|
||||
The original Samba software and related utilities
|
||||
were created by Andrew Tridgell. Samba is now developed
|
||||
by the Samba Team as an Open Source project similar
|
||||
to the way the Linux kernel is developed.
|
||||
.PP
|
||||
\fBsmbgroupedit\fR was written by Jean Francois Micouleau.
|
||||
The current set of manpages and documentation is maintained
|
||||
by the Samba Team in the same fashion as the Samba source code.
|
||||
Loading…
x
Reference in New Issue
Block a user