sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-25 17:57:42 +03:00
Code

docs: Improve wording around 'winbind expand groups' param

Browse Source 
Signed-off-by: Noel Power <noel.power@suse.com>

Reviewed-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jim McDonough <jmcd@samba.org>

Autobuild-User(master): Jim McDonough <jmcd@samba.org>
Autobuild-Date(master): Fri Sep 29 22:37:08 CEST 2017 on sn-devel-144
This commit is contained in:
Noel Power 2017-09-28 12:28:46 +01:00 committed by Jim McDonough
parent 05beefd50a
commit 2c50bdfed0
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
View File

@ -12,16 +12,23 @@
parameter specifically applies to the membership of
domain groups.</para>
<para>This option also affects the return of non nested
group memberships of Windows domain users. With the
new default "winbind expand groups = 0" winbind does
not query group memberships at all.</para>
<para>Be aware that a high value for this parameter can
result in system slowdown as the main parent winbindd daemon
must perform the group unrolling and will be unable to answer
incoming NSS or authentication requests during this time.</para>
<para>The default value was changed from 1 to 0 with Samba 4.2.
Some broken applications calculate the group memberships of
Some broken applications (including some implementations of
newgrp and sg) calculate the group memberships of
users by traversing groups, such applications will require
"winbind expand groups = 1". But the new default makes winbindd more reliable
as it doesn't require SAMR access to domain controllers of trusted domains.</para>
"winbind expand groups = 1". But the new default makes winbindd
more reliable as it doesn't require SAMR access to domain
controllers of trusted domains.</para>
</description>
<value type="default">0</value>