diff --git a/docs/Samba-Guide/Chap07-2000UserNetwork.xml b/docs/Samba-Guide/Chap07-2000UserNetwork.xml index bb5134f3530..19e7932e616 100644 --- a/docs/Samba-Guide/Chap07-2000UserNetwork.xml +++ b/docs/Samba-Guide/Chap07-2000UserNetwork.xml @@ -1148,7 +1148,7 @@ index default sub name resolve orderwins bcast hosts time serverYes printcap nameCUPS -add user script/var/lib/samba/sbin/smbldap-useradd.pl -a -m '%u' +add user script/var/lib/samba/sbin/smbldap-useradd.pl -m '%u' delete user script/var/lib/samba/sbin/smbldap-userdel.pl '%u' add group script/var/lib/samba/sbin/smbldap-groupadd.pl -p '%g' delete group script/var/lib/samba/sbin/smbldap-groupdel.pl '%g' diff --git a/docs/smbdotconf/winbind/idmapbackend.xml b/docs/smbdotconf/winbind/idmapbackend.xml index 0c22c4a44b5..ad1c7509548 100644 --- a/docs/smbdotconf/winbind/idmapbackend.xml +++ b/docs/smbdotconf/winbind/idmapbackend.xml @@ -11,8 +11,18 @@ to SID mappings. This avoids the risk of UID / GID inconsistencies across UNIX / Linux systems that are sharing information over protocols other than SMB/CIFS (ie: NFS). + + + An alternate method of SID to UID / GID mapping can be achieved using the idmap_rid + plug-in. This plug-in uses the account RID to derive the UID and GID by adding the + RID to a base value specified. This utility requires that the parameter + allow trusted domains = No must be specified, as it is not compatible + with multiple domain environments. The idmap uid and idmap gid ranges must also be + specified. + ldap:ldap://ldapslave.example.com +idmap_rid:DOMNAME=1000-100000000