mirror of
https://github.com/samba-team/samba.git
synced 2025-12-02 00:23:50 +03:00
idmap_ldap.8: Remove references to idmap alloc backend
Signed-off-by: Luk Claes <luk@debian.org> Signed-off-by: Michael Adam <obnox@samba.org>
This commit is contained in:
@@ -27,26 +27,9 @@
|
|||||||
<para>
|
<para>
|
||||||
In contrast to read only backends like idmap_rid, it is an allocating
|
In contrast to read only backends like idmap_rid, it is an allocating
|
||||||
backend: This means that it needs to allocate new user and group IDs in
|
backend: This means that it needs to allocate new user and group IDs in
|
||||||
order to create new mappings. The allocator can be provided by the
|
order to create new mappings.
|
||||||
idmap_ldap backend itself or by any other allocating backend like
|
|
||||||
idmap_tdb or idmap_tdb2. This is configured with the
|
|
||||||
parameter <parameter>idmap alloc backend</parameter>.
|
|
||||||
</para>
|
</para>
|
||||||
|
|
||||||
<para>
|
|
||||||
Note that in order for this (or any other allocating) backend to
|
|
||||||
function at all, the default backend needs to be writeable.
|
|
||||||
The ranges used for uid and gid allocation are the default ranges
|
|
||||||
configured by "idmap uid" and "idmap gid".
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para>
|
|
||||||
Furthermore, since there is only one global allocating backend
|
|
||||||
responsible for all domains using writeable idmap backends,
|
|
||||||
any explicitly configured domain with idmap backend ldap
|
|
||||||
should have the same range as the default range, since it needs
|
|
||||||
to use the global uid / gid allocator. See the example below.
|
|
||||||
</para>
|
|
||||||
</refsynopsisdiv>
|
</refsynopsisdiv>
|
||||||
|
|
||||||
<refsect1>
|
<refsect1>
|
||||||
@@ -92,38 +75,6 @@
|
|||||||
</variablelist>
|
</variablelist>
|
||||||
</refsect1>
|
</refsect1>
|
||||||
|
|
||||||
<refsect1>
|
|
||||||
<title>IDMAP ALLOC OPTIONS</title>
|
|
||||||
|
|
||||||
<variablelist>
|
|
||||||
<varlistentry>
|
|
||||||
<term>ldap_base_dn = DN</term>
|
|
||||||
<listitem><para>
|
|
||||||
Defines the directory base suffix under which new SID/uid/gid mapping
|
|
||||||
entries should be stored. If not defined, idmap_ldap will default
|
|
||||||
to using the "ldap idmap suffix" option from smb.conf.
|
|
||||||
</para></listitem>
|
|
||||||
</varlistentry>
|
|
||||||
|
|
||||||
<varlistentry>
|
|
||||||
<term>ldap_user_dn = DN</term>
|
|
||||||
<listitem><para>
|
|
||||||
Defines the user DN to be used for authentication. If absent an
|
|
||||||
anonymous bind will be performed.
|
|
||||||
</para></listitem>
|
|
||||||
</varlistentry>
|
|
||||||
|
|
||||||
<varlistentry>
|
|
||||||
<term>ldap_url = ldap://server/</term>
|
|
||||||
<listitem><para>
|
|
||||||
Specifies the LDAP server to which modify/add/delete requests should
|
|
||||||
be sent. If not defined, idmap_ldap will assume that ldap://localhost/
|
|
||||||
should be used.
|
|
||||||
</para></listitem>
|
|
||||||
</varlistentry>
|
|
||||||
</variablelist>
|
|
||||||
</refsect1>
|
|
||||||
|
|
||||||
<refsect1>
|
<refsect1>
|
||||||
<title>EXAMPLES</title>
|
<title>EXAMPLES</title>
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user