mirror of
https://github.com/samba-team/samba.git
synced 2025-02-04 17:47:26 +03:00
removing smbgroupedit man page
This commit is contained in:
Gerald Carter
-
parent
554026b208
commit
9134feb9f6
@ -21,7 +21,7 @@ MANPAGES_NAMES=findsmb.1 smbclient.1 \
|
|||||||
smbpasswd.8 testprns.1 \
|
smbpasswd.8 testprns.1 \
|
||||||
smb.conf.5 wbinfo.1 pdbedit.8 \
|
smb.conf.5 wbinfo.1 pdbedit.8 \
|
||||||
smbcacls.1 smbsh.1 winbindd.8 \
|
smbcacls.1 smbsh.1 winbindd.8 \
|
||||||
smbgroupedit.8 vfstest.1
|
vfstest.1
|
||||||
|
|
||||||
## This part contains only rules. You shouldn't need to change it
|
## This part contains only rules. You shouldn't need to change it
|
||||||
## if you are adding docs
|
## if you are adding docs
|
||||||
|
|||||||
@ -1,267 +0,0 @@
|
|||||||
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN">
|
|
||||||
<refentry id="smbgroupedit">
|
|
||||||
|
|
||||||
<refmeta>
|
|
||||||
<refentrytitle>smbgroupedit</refentrytitle>
|
|
||||||
<manvolnum>8</manvolnum>
|
|
||||||
</refmeta>
|
|
||||||
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
** Name and Options **
|
|
||||||
**************************************************** -->
|
|
||||||
<refnamediv>
|
|
||||||
<refname>smbgroupedit</refname>
|
|
||||||
<refpurpose>Query/set/change UNIX - Windows NT group mapping</refpurpose>
|
|
||||||
</refnamediv>
|
|
||||||
|
|
||||||
<refsynopsisdiv>
|
|
||||||
<cmdsynopsis>
|
|
||||||
<command>smbroupedit</command>
|
|
||||||
<arg choice="opt">-v [l|s]</arg>
|
|
||||||
<arg choice="opt">-a UNIX-groupname [-d NT-groupname|-p privilege|]</arg>
|
|
||||||
</cmdsynopsis>
|
|
||||||
</refsynopsisdiv>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
** Description **
|
|
||||||
**************************************************** -->
|
|
||||||
<refsect1>
|
|
||||||
|
|
||||||
<title>DESCRIPTION</title>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
This program is part of the <ulink url="samba.7.html">Samba</ulink>
|
|
||||||
suite.
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
The smbgroupedit command allows for mapping unix groups
|
|
||||||
to NT Builtin, Domain, or Local groups. Also
|
|
||||||
allows setting privileges for that group, such as saAddUser,
|
|
||||||
etc.
|
|
||||||
</para>
|
|
||||||
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
<refsect1>
|
|
||||||
<title>OPTIONS</title>
|
|
||||||
|
|
||||||
<variablelist>
|
|
||||||
<varlistentry>
|
|
||||||
<term>-v[l|s]</term>
|
|
||||||
<listitem><para>This option will list all groups available
|
|
||||||
in the Windows NT domain in which samba is operating.
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<variablelist>
|
|
||||||
<varlistentry>
|
|
||||||
<term>-l</term>
|
|
||||||
<listitem><para>give a long listing, of the format:</para>
|
|
||||||
|
|
||||||
<para><programlisting>
|
|
||||||
"NT Group Name"
|
|
||||||
SID :
|
|
||||||
Unix group :
|
|
||||||
Group type :
|
|
||||||
Comment :
|
|
||||||
Privilege :
|
|
||||||
</programlisting></para>
|
|
||||||
|
|
||||||
<para>For examples,</para>
|
|
||||||
<para><programlisting>
|
|
||||||
Users
|
|
||||||
SID : S-1-5-32-545
|
|
||||||
Unix group: -1
|
|
||||||
Group type: Local group
|
|
||||||
Comment :
|
|
||||||
Privilege : No privilege
|
|
||||||
</programlisting></para>
|
|
||||||
|
|
||||||
</listitem>
|
|
||||||
</varlistentry>
|
|
||||||
|
|
||||||
<varlistentry>
|
|
||||||
<term>-s</term>
|
|
||||||
<listitem><para>display a short listing of the format:</para>
|
|
||||||
|
|
||||||
<para><programlisting>
|
|
||||||
NTGroupName(SID) -> UnixGroupName
|
|
||||||
</programlisting></para>
|
|
||||||
|
|
||||||
<para>For example,</para>
|
|
||||||
|
|
||||||
<para><programlisting>
|
|
||||||
Users (S-1-5-32-545) -> -1
|
|
||||||
</programlisting></para>
|
|
||||||
|
|
||||||
</listitem>
|
|
||||||
</varlistentry>
|
|
||||||
</variablelist>
|
|
||||||
|
|
||||||
</listitem>
|
|
||||||
</varlistentry>
|
|
||||||
|
|
||||||
</variablelist>
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
**************************************************** -->
|
|
||||||
<refsect1>
|
|
||||||
<title>FILES</title>
|
|
||||||
|
|
||||||
<para></para>
|
|
||||||
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
**************************************************** -->
|
|
||||||
<refsect1>
|
|
||||||
|
|
||||||
<title>EXIT STATUS</title>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
<command>smbgroupedit</command> returns a status of 0 if the
|
|
||||||
operation completed successfully, and a value of 1 in the event
|
|
||||||
of a failure.
|
|
||||||
</para>
|
|
||||||
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
**************************************************** -->
|
|
||||||
<refsect1>
|
|
||||||
|
|
||||||
<title>EXAMPLES</title>
|
|
||||||
|
|
||||||
|
|
||||||
<para>
|
|
||||||
To make a subset of your samba PDC users members of
|
|
||||||
the 'Domain Admins' Global group:
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<orderedlist>
|
|
||||||
|
|
||||||
<listitem><para>create a unix group (usually in
|
|
||||||
<filename>/etc/group</filename>), let's call it <constant>domadm</constant>.
|
|
||||||
</para></listitem>
|
|
||||||
|
|
||||||
<listitem><para>add to this group the users that you want to be
|
|
||||||
domain administrators. For example if you want joe, john and mary,
|
|
||||||
your entry in <filename>/etc/group</filename> will look like:
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para>domadm:x:502:joe,john,mary</para>
|
|
||||||
</listitem>
|
|
||||||
|
|
||||||
<listitem><para>map this domadm group to the 'domain admins' group:
|
|
||||||
</para>
|
|
||||||
<orderedlist>
|
|
||||||
<listitem><para>Get the SID for the Windows NT "Domain Admins"
|
|
||||||
group:</para>
|
|
||||||
|
|
||||||
<para><programlisting>
|
|
||||||
<prompt>root# </prompt><command>smbgroupedit -vs | grep "Domain Admins"</command>
|
|
||||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1
|
|
||||||
</programlisting></para>
|
|
||||||
</listitem>
|
|
||||||
|
|
||||||
<listitem><para>map the unix domadm group to the Windows NT
|
|
||||||
"Domain Admins" group, by running the command:
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para><programlisting>
|
|
||||||
<prompt>root# </prompt><command>smbgroupedit \
|
|
||||||
-c S-1-5-21-1108995562-3116817432-1375597819-512 \
|
|
||||||
-u domadm -td</command>
|
|
||||||
</programlisting></para>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
<emphasis>warning:</emphasis> don't copy and paste this sample, the
|
|
||||||
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
|
|
||||||
</para>
|
|
||||||
</listitem>
|
|
||||||
</orderedlist>
|
|
||||||
</listitem>
|
|
||||||
</orderedlist>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
To verify that your mapping has taken effect:
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para><programlisting>
|
|
||||||
<prompt>root# </prompt><command>smbgroupedit -vs|grep "Domain Admins"</command>
|
|
||||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm
|
|
||||||
</programlisting></para>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
To give access to a certain directory on a domain member machine (an
|
|
||||||
NT/W2K or a samba server running winbind) to some users who are member
|
|
||||||
of a group on your samba PDC, flag that group as a domain group:
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para><programlisting>
|
|
||||||
<prompt>root# </prompt><command>smbgroupedit -a unixgroup -td</command>
|
|
||||||
</programlisting></para>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
**************************************************** -->
|
|
||||||
<refsect1>
|
|
||||||
|
|
||||||
<title>VERSION</title>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
This man page is correct for the 3.0alpha releases of
|
|
||||||
the Samba suite.
|
|
||||||
</para>
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
**************************************************** -->
|
|
||||||
|
|
||||||
<refsect1>
|
|
||||||
<title>SEE ALSO</title>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
<ulink url="smb.conf.5.html">smb.conf(5)</ulink>
|
|
||||||
</para>
|
|
||||||
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
|
|
||||||
<!-- ****************************************************
|
|
||||||
**************************************************** -->
|
|
||||||
|
|
||||||
<refsect1>
|
|
||||||
<title>AUTHOR</title>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
The original Samba software and related utilities
|
|
||||||
were created by Andrew Tridgell. Samba is now developed
|
|
||||||
by the Samba Team as an Open Source project similar
|
|
||||||
to the way the Linux kernel is developed.
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
<command>smbgroupedit</command> was written by Jean Francois Micouleau.
|
|
||||||
The current set of manpages and documentation is maintained
|
|
||||||
by the Samba Team in the same fashion as the Samba source code.</para>
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
</refentry>
|
|
||||||
@ -1,401 +0,0 @@
|
|||||||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
|
|
||||||
<HTML
|
|
||||||
><HEAD
|
|
||||||
><TITLE
|
|
||||||
>smbgroupedit</TITLE
|
|
||||||
><META
|
|
||||||
NAME="GENERATOR"
|
|
||||||
CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
|
|
||||||
"></HEAD
|
|
||||||
><BODY
|
|
||||||
CLASS="REFENTRY"
|
|
||||||
BGCOLOR="#FFFFFF"
|
|
||||||
TEXT="#000000"
|
|
||||||
LINK="#0000FF"
|
|
||||||
VLINK="#840084"
|
|
||||||
ALINK="#0000FF"
|
|
||||||
><H1
|
|
||||||
><A
|
|
||||||
NAME="SMBGROUPEDIT">smbgroupedit</H1
|
|
||||||
><DIV
|
|
||||||
CLASS="REFNAMEDIV"
|
|
||||||
><A
|
|
||||||
NAME="AEN5"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>Name</H2
|
|
||||||
>smbgroupedit -- Query/set/change UNIX - Windows NT group mapping</DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSYNOPSISDIV"
|
|
||||||
><A
|
|
||||||
NAME="AEN8"><H2
|
|
||||||
>Synopsis</H2
|
|
||||||
><P
|
|
||||||
><B
|
|
||||||
CLASS="COMMAND"
|
|
||||||
>smbroupedit</B
|
|
||||||
> [-v [l|s]] [-a UNIX-groupname [-d NT-groupname|-p privilege|]]</P
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN13"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>DESCRIPTION</H2
|
|
||||||
><P
|
|
||||||
>This program is part of the <A
|
|
||||||
HREF="samba.7.html"
|
|
||||||
TARGET="_top"
|
|
||||||
>Samba</A
|
|
||||||
>
|
|
||||||
suite.</P
|
|
||||||
><P
|
|
||||||
>The smbgroupedit command allows for mapping unix groups
|
|
||||||
to NT Builtin, Domain, or Local groups. Also
|
|
||||||
allows setting privileges for that group, such as saAddUser,
|
|
||||||
etc.</P
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN18"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>OPTIONS</H2
|
|
||||||
><P
|
|
||||||
></P
|
|
||||||
><DIV
|
|
||||||
CLASS="VARIABLELIST"
|
|
||||||
><DL
|
|
||||||
><DT
|
|
||||||
>-v[l|s]</DT
|
|
||||||
><DD
|
|
||||||
><P
|
|
||||||
>This option will list all groups available
|
|
||||||
in the Windows NT domain in which samba is operating.
|
|
||||||
</P
|
|
||||||
><P
|
|
||||||
></P
|
|
||||||
><DIV
|
|
||||||
CLASS="VARIABLELIST"
|
|
||||||
><DL
|
|
||||||
><DT
|
|
||||||
>-l</DT
|
|
||||||
><DD
|
|
||||||
><P
|
|
||||||
>give a long listing, of the format:</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="90%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
>"NT Group Name"
|
|
||||||
SID :
|
|
||||||
Unix group :
|
|
||||||
Group type :
|
|
||||||
Comment :
|
|
||||||
Privilege :</PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
><P
|
|
||||||
>For examples,</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="90%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
>Users
|
|
||||||
SID : S-1-5-32-545
|
|
||||||
Unix group: -1
|
|
||||||
Group type: Local group
|
|
||||||
Comment :
|
|
||||||
Privilege : No privilege</PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
></DD
|
|
||||||
><DT
|
|
||||||
>-s</DT
|
|
||||||
><DD
|
|
||||||
><P
|
|
||||||
>display a short listing of the format:</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="90%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
>NTGroupName(SID) -> UnixGroupName</PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
><P
|
|
||||||
>For example,</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="90%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
>Users (S-1-5-32-545) -> -1</PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
></DD
|
|
||||||
></DL
|
|
||||||
></DIV
|
|
||||||
></DD
|
|
||||||
></DL
|
|
||||||
></DIV
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN44"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>FILES</H2
|
|
||||||
><P
|
|
||||||
></P
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN47"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>EXIT STATUS</H2
|
|
||||||
><P
|
|
||||||
><B
|
|
||||||
CLASS="COMMAND"
|
|
||||||
>smbgroupedit</B
|
|
||||||
> returns a status of 0 if the
|
|
||||||
operation completed successfully, and a value of 1 in the event
|
|
||||||
of a failure.</P
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN51"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>EXAMPLES</H2
|
|
||||||
><P
|
|
||||||
>To make a subset of your samba PDC users members of
|
|
||||||
the 'Domain Admins' Global group:</P
|
|
||||||
><P
|
|
||||||
></P
|
|
||||||
><OL
|
|
||||||
TYPE="1"
|
|
||||||
><LI
|
|
||||||
><P
|
|
||||||
>create a unix group (usually in
|
|
||||||
<TT
|
|
||||||
CLASS="FILENAME"
|
|
||||||
>/etc/group</TT
|
|
||||||
>), let's call it <TT
|
|
||||||
CLASS="CONSTANT"
|
|
||||||
>domadm</TT
|
|
||||||
>.
|
|
||||||
</P
|
|
||||||
></LI
|
|
||||||
><LI
|
|
||||||
><P
|
|
||||||
>add to this group the users that you want to be
|
|
||||||
domain administrators. For example if you want joe, john and mary,
|
|
||||||
your entry in <TT
|
|
||||||
CLASS="FILENAME"
|
|
||||||
>/etc/group</TT
|
|
||||||
> will look like:
|
|
||||||
</P
|
|
||||||
><P
|
|
||||||
>domadm:x:502:joe,john,mary</P
|
|
||||||
></LI
|
|
||||||
><LI
|
|
||||||
><P
|
|
||||||
>map this domadm group to the 'domain admins' group:
|
|
||||||
</P
|
|
||||||
><P
|
|
||||||
></P
|
|
||||||
><OL
|
|
||||||
TYPE="a"
|
|
||||||
><LI
|
|
||||||
><P
|
|
||||||
>Get the SID for the Windows NT "Domain Admins"
|
|
||||||
group:</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="90%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
><TT
|
|
||||||
CLASS="PROMPT"
|
|
||||||
>root# </TT
|
|
||||||
><B
|
|
||||||
CLASS="COMMAND"
|
|
||||||
>smbgroupedit -vs | grep "Domain Admins"</B
|
|
||||||
>
|
|
||||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1</PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
></LI
|
|
||||||
><LI
|
|
||||||
><P
|
|
||||||
>map the unix domadm group to the Windows NT
|
|
||||||
"Domain Admins" group, by running the command:
|
|
||||||
</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="90%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
><TT
|
|
||||||
CLASS="PROMPT"
|
|
||||||
>root# </TT
|
|
||||||
><B
|
|
||||||
CLASS="COMMAND"
|
|
||||||
>smbgroupedit \
|
|
||||||
-c S-1-5-21-1108995562-3116817432-1375597819-512 \
|
|
||||||
-u domadm -td</B
|
|
||||||
></PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
><P
|
|
||||||
> <I
|
|
||||||
CLASS="EMPHASIS"
|
|
||||||
>warning:</I
|
|
||||||
> don't copy and paste this sample, the
|
|
||||||
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
|
|
||||||
</P
|
|
||||||
></LI
|
|
||||||
></OL
|
|
||||||
></LI
|
|
||||||
></OL
|
|
||||||
><P
|
|
||||||
>To verify that your mapping has taken effect:</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="100%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
><TT
|
|
||||||
CLASS="PROMPT"
|
|
||||||
>root# </TT
|
|
||||||
><B
|
|
||||||
CLASS="COMMAND"
|
|
||||||
>smbgroupedit -vs|grep "Domain Admins"</B
|
|
||||||
>
|
|
||||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm</PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
><P
|
|
||||||
>To give access to a certain directory on a domain member machine (an
|
|
||||||
NT/W2K or a samba server running winbind) to some users who are member
|
|
||||||
of a group on your samba PDC, flag that group as a domain group:</P
|
|
||||||
><P
|
|
||||||
><TABLE
|
|
||||||
BORDER="0"
|
|
||||||
BGCOLOR="#E0E0E0"
|
|
||||||
WIDTH="100%"
|
|
||||||
><TR
|
|
||||||
><TD
|
|
||||||
><PRE
|
|
||||||
CLASS="PROGRAMLISTING"
|
|
||||||
><TT
|
|
||||||
CLASS="PROMPT"
|
|
||||||
>root# </TT
|
|
||||||
><B
|
|
||||||
CLASS="COMMAND"
|
|
||||||
>smbgroupedit -a unixgroup -td</B
|
|
||||||
></PRE
|
|
||||||
></TD
|
|
||||||
></TR
|
|
||||||
></TABLE
|
|
||||||
></P
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN90"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>VERSION</H2
|
|
||||||
><P
|
|
||||||
>This man page is correct for the 3.0alpha releases of
|
|
||||||
the Samba suite.</P
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN93"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>SEE ALSO</H2
|
|
||||||
><P
|
|
||||||
><A
|
|
||||||
HREF="smb.conf.5.html"
|
|
||||||
TARGET="_top"
|
|
||||||
>smb.conf(5)</A
|
|
||||||
></P
|
|
||||||
></DIV
|
|
||||||
><DIV
|
|
||||||
CLASS="REFSECT1"
|
|
||||||
><A
|
|
||||||
NAME="AEN97"
|
|
||||||
></A
|
|
||||||
><H2
|
|
||||||
>AUTHOR</H2
|
|
||||||
><P
|
|
||||||
>The original Samba software and related utilities
|
|
||||||
were created by Andrew Tridgell. Samba is now developed
|
|
||||||
by the Samba Team as an Open Source project similar
|
|
||||||
to the way the Linux kernel is developed.</P
|
|
||||||
><P
|
|
||||||
><B
|
|
||||||
CLASS="COMMAND"
|
|
||||||
>smbgroupedit</B
|
|
||||||
> was written by Jean Francois Micouleau.
|
|
||||||
The current set of manpages and documentation is maintained
|
|
||||||
by the Samba Team in the same fashion as the Samba source code.</P
|
|
||||||
></DIV
|
|
||||||
></BODY
|
|
||||||
></HTML
|
|
||||||
>
|
|
||||||
@ -1,153 +0,0 @@
|
|||||||
.\" This manpage has been automatically generated by docbook2man
|
|
||||||
.\" from a DocBook document. This tool can be found at:
|
|
||||||
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
|
|
||||||
.\" Please send any bug reports, improvements, comments, patches,
|
|
||||||
.\" etc. to Steve Cheng <steve@ggi-project.org>.
|
|
||||||
.TH "SMBGROUPEDIT" "8" "04 March 2003" "" ""
|
|
||||||
.SH NAME
|
|
||||||
smbgroupedit \- Query/set/change UNIX - Windows NT group mapping
|
|
||||||
.SH SYNOPSIS
|
|
||||||
|
|
||||||
\fBsmbroupedit\fR [ \fB-v [l|s]\fR ] [ \fB-a UNIX-groupname [-d NT-groupname|-p privilege|]\fR ]
|
|
||||||
|
|
||||||
.SH "DESCRIPTION"
|
|
||||||
.PP
|
|
||||||
This program is part of the Samba
|
|
||||||
suite.
|
|
||||||
.PP
|
|
||||||
The smbgroupedit command allows for mapping unix groups
|
|
||||||
to NT Builtin, Domain, or Local groups. Also
|
|
||||||
allows setting privileges for that group, such as saAddUser,
|
|
||||||
etc.
|
|
||||||
.SH "OPTIONS"
|
|
||||||
.TP
|
|
||||||
\fB-v[l|s]\fR
|
|
||||||
This option will list all groups available
|
|
||||||
in the Windows NT domain in which samba is operating.
|
|
||||||
.RS
|
|
||||||
.TP
|
|
||||||
\fB-l\fR
|
|
||||||
give a long listing, of the format:
|
|
||||||
|
|
||||||
|
|
||||||
.nf
|
|
||||||
"NT Group Name"
|
|
||||||
SID :
|
|
||||||
Unix group :
|
|
||||||
Group type :
|
|
||||||
Comment :
|
|
||||||
Privilege :
|
|
||||||
.fi
|
|
||||||
|
|
||||||
For examples,
|
|
||||||
|
|
||||||
|
|
||||||
.nf
|
|
||||||
Users
|
|
||||||
SID : S-1-5-32-545
|
|
||||||
Unix group: -1
|
|
||||||
Group type: Local group
|
|
||||||
Comment :
|
|
||||||
Privilege : No privilege
|
|
||||||
.fi
|
|
||||||
.TP
|
|
||||||
\fB-s\fR
|
|
||||||
display a short listing of the format:
|
|
||||||
|
|
||||||
|
|
||||||
.nf
|
|
||||||
NTGroupName(SID) -> UnixGroupName
|
|
||||||
.fi
|
|
||||||
|
|
||||||
For example,
|
|
||||||
|
|
||||||
|
|
||||||
.nf
|
|
||||||
Users (S-1-5-32-545) -> -1
|
|
||||||
.fi
|
|
||||||
.RE
|
|
||||||
.SH "FILES"
|
|
||||||
.PP
|
|
||||||
.SH "EXIT STATUS"
|
|
||||||
.PP
|
|
||||||
\fBsmbgroupedit\fR returns a status of 0 if the
|
|
||||||
operation completed successfully, and a value of 1 in the event
|
|
||||||
of a failure.
|
|
||||||
.SH "EXAMPLES"
|
|
||||||
.PP
|
|
||||||
To make a subset of your samba PDC users members of
|
|
||||||
the 'Domain Admins' Global group:
|
|
||||||
.TP 3
|
|
||||||
1.
|
|
||||||
create a unix group (usually in
|
|
||||||
\fI/etc/group\fR), let's call it domadm.
|
|
||||||
.TP 3
|
|
||||||
2.
|
|
||||||
add to this group the users that you want to be
|
|
||||||
domain administrators. For example if you want joe, john and mary,
|
|
||||||
your entry in \fI/etc/group\fR will look like:
|
|
||||||
|
|
||||||
domadm:x:502:joe,john,mary
|
|
||||||
.TP 3
|
|
||||||
3.
|
|
||||||
map this domadm group to the 'domain admins' group:
|
|
||||||
.RS
|
|
||||||
.TP 3
|
|
||||||
1.
|
|
||||||
Get the SID for the Windows NT "Domain Admins"
|
|
||||||
group:
|
|
||||||
|
|
||||||
|
|
||||||
.nf
|
|
||||||
root# \fBsmbgroupedit -vs | grep "Domain Admins"\fR
|
|
||||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1
|
|
||||||
.fi
|
|
||||||
.TP 3
|
|
||||||
2.
|
|
||||||
map the unix domadm group to the Windows NT
|
|
||||||
"Domain Admins" group, by running the command:
|
|
||||||
|
|
||||||
|
|
||||||
.nf
|
|
||||||
root# \fBsmbgroupedit \\
|
|
||||||
-c S-1-5-21-1108995562-3116817432-1375597819-512 \\
|
|
||||||
-u domadm -td\fR
|
|
||||||
.fi
|
|
||||||
|
|
||||||
\fBwarning:\fR don't copy and paste this sample, the
|
|
||||||
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
|
|
||||||
.RE
|
|
||||||
.PP
|
|
||||||
To verify that your mapping has taken effect:
|
|
||||||
.PP
|
|
||||||
|
|
||||||
.nf
|
|
||||||
root# \fBsmbgroupedit -vs|grep "Domain Admins"\fR
|
|
||||||
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm
|
|
||||||
.fi
|
|
||||||
.PP
|
|
||||||
To give access to a certain directory on a domain member machine (an
|
|
||||||
NT/W2K or a samba server running winbind) to some users who are member
|
|
||||||
of a group on your samba PDC, flag that group as a domain group:
|
|
||||||
.PP
|
|
||||||
|
|
||||||
.nf
|
|
||||||
root# \fBsmbgroupedit -a unixgroup -td\fR
|
|
||||||
.fi
|
|
||||||
.SH "VERSION"
|
|
||||||
.PP
|
|
||||||
This man page is correct for the 3.0alpha releases of
|
|
||||||
the Samba suite.
|
|
||||||
.SH "SEE ALSO"
|
|
||||||
.PP
|
|
||||||
smb.conf(5)
|
|
||||||
.SH "AUTHOR"
|
|
||||||
.PP
|
|
||||||
The original Samba software and related utilities
|
|
||||||
were created by Andrew Tridgell. Samba is now developed
|
|
||||||
by the Samba Team as an Open Source project similar
|
|
||||||
to the way the Linux kernel is developed.
|
|
||||||
.PP
|
|
||||||
\fBsmbgroupedit\fR was written by Jean Francois Micouleau.
|
|
||||||
The current set of manpages and documentation is maintained
|
|
||||||
by the Samba Team in the same fashion as the Samba source code.
|
|
||||||
Loading…
x
Reference in New Issue
Block a user