mirror of
https://github.com/samba-team/samba.git
synced 2025-12-02 00:23:50 +03:00
idmap_ldap.8: Remove references to idmap alloc backend
Signed-off-by: Luk Claes <luk@debian.org> Signed-off-by: Michael Adam <obnox@samba.org>
This commit is contained in:
@@ -27,26 +27,9 @@
|
||||
<para>
|
||||
In contrast to read only backends like idmap_rid, it is an allocating
|
||||
backend: This means that it needs to allocate new user and group IDs in
|
||||
order to create new mappings. The allocator can be provided by the
|
||||
idmap_ldap backend itself or by any other allocating backend like
|
||||
idmap_tdb or idmap_tdb2. This is configured with the
|
||||
parameter <parameter>idmap alloc backend</parameter>.
|
||||
order to create new mappings.
|
||||
</para>
|
||||
|
||||
<para>
|
||||
Note that in order for this (or any other allocating) backend to
|
||||
function at all, the default backend needs to be writeable.
|
||||
The ranges used for uid and gid allocation are the default ranges
|
||||
configured by "idmap uid" and "idmap gid".
|
||||
</para>
|
||||
|
||||
<para>
|
||||
Furthermore, since there is only one global allocating backend
|
||||
responsible for all domains using writeable idmap backends,
|
||||
any explicitly configured domain with idmap backend ldap
|
||||
should have the same range as the default range, since it needs
|
||||
to use the global uid / gid allocator. See the example below.
|
||||
</para>
|
||||
</refsynopsisdiv>
|
||||
|
||||
<refsect1>
|
||||
@@ -92,38 +75,6 @@
|
||||
</variablelist>
|
||||
</refsect1>
|
||||
|
||||
<refsect1>
|
||||
<title>IDMAP ALLOC OPTIONS</title>
|
||||
|
||||
<variablelist>
|
||||
<varlistentry>
|
||||
<term>ldap_base_dn = DN</term>
|
||||
<listitem><para>
|
||||
Defines the directory base suffix under which new SID/uid/gid mapping
|
||||
entries should be stored. If not defined, idmap_ldap will default
|
||||
to using the "ldap idmap suffix" option from smb.conf.
|
||||
</para></listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry>
|
||||
<term>ldap_user_dn = DN</term>
|
||||
<listitem><para>
|
||||
Defines the user DN to be used for authentication. If absent an
|
||||
anonymous bind will be performed.
|
||||
</para></listitem>
|
||||
</varlistentry>
|
||||
|
||||
<varlistentry>
|
||||
<term>ldap_url = ldap://server/</term>
|
||||
<listitem><para>
|
||||
Specifies the LDAP server to which modify/add/delete requests should
|
||||
be sent. If not defined, idmap_ldap will assume that ldap://localhost/
|
||||
should be used.
|
||||
</para></listitem>
|
||||
</varlistentry>
|
||||
</variablelist>
|
||||
</refsect1>
|
||||
|
||||
<refsect1>
|
||||
<title>EXAMPLES</title>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user