1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
samba-mirror/docs-xml/smbdotconf/winbind
Stefan Metzmacher 98426ad467 lib/param: change the default for "winbind expand groups" to "0"
Expanding groups requires the usage of SAMR, which is often not possible
with the trust account credentials. This has caused a lot of trouble
in the past, as this is the only operation which requires a member to
contact a dc of a trusted domain directly, which is not always possible.
With this changed default, it should only be required to contact
a dc of our own domain. This is the correct behavior for a domain member.

As expanding groups is mostly cosmetic, we should avoid it.
This is similar to "winbind enum users" and "winbind enum groups",
which are also off by default.

Only some broken applications calculate the group memberships of
users by traversing groups, such applications will require
"winbind expand groups = 1".

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Björn Jacke <bj@sernet.de>

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Thu Jul 31 18:48:36 CEST 2014 on sn-devel-104
2014-07-31 18:48:36 +02:00
..
createkrb5conf.xml docs: fix type for create krb5 conf parameter 2014-02-02 23:43:45 +01:00
idmapbackend.xml docs: insert meta data for idmap backend parameter - mark do not generate function 2014-02-03 00:47:20 +01:00
idmapcachetime.xml docs: update idmap cache time to be consistent with testparm 2014-01-28 17:26:37 +13:00
idmapconfig.xml docs: remove duplicate "the" from smb.conf manpage. 2013-11-19 12:17:19 +01:00
idmapgid.xml docs: insert meta data for idmap gid parameter - mark do not generate function 2014-02-03 00:47:20 +01:00
idmapnegativecachetime.xml Moving docs tree to docs-xml to make room for generated docs in the release tarball. 2008-04-23 08:47:48 -05:00
idmapuid.xml docs: insert meta data for idmap uid parameter - mark do not generate function 2014-02-03 00:47:21 +01:00
netutralizent4emulation.xml lib/param: add "neutralize nt4 emulation" option, defaulting to false 2014-01-07 12:47:04 +01:00
rejectmd5servers.xml lib/param: add "reject md5 servers" option, defaulting to false 2014-01-07 12:47:04 +01:00
requirestrongkey.xml lib/param: add "require strong key" option, defaulting to true 2014-01-07 12:47:05 +01:00
templatehomedir.xml docs: insert meta data into template homedir parameter 2014-02-02 23:43:32 +01:00
templateshell.xml docs: insert meta data into template shell parameter 2014-02-02 23:43:32 +01:00
winbindcachetime.xml Moving docs tree to docs-xml to make room for generated docs in the release tarball. 2008-04-23 08:47:48 -05:00
winbinddprivilegedsocketdirectory.xml docs: insert meta data into winbindd privileged socket directory parameter 2014-02-02 23:43:33 +01:00
winbinddsocketdirectory.xml docs: insert meta data into winbindd socket directory parameter 2014-02-02 23:43:34 +01:00
winbindenumgroups.xml Moving docs tree to docs-xml to make room for generated docs in the release tarball. 2008-04-23 08:47:48 -05:00
winbindenumusers.xml docs: include type attribute for winbind enum users 2014-01-28 17:26:39 +13:00
winbindexpandgroups.xml lib/param: change the default for "winbind expand groups" to "0" 2014-07-31 18:48:36 +02:00
winbindmaxclients.xml Allows changing the maximum number of simultaneous clients in winbindd through an smb.conf option. 2010-09-14 16:43:39 -07:00
winbindmaxdomainconnections.xml docs: insert meta data for winbind max domain connections parameter - mark do not generate function 2014-02-03 00:47:18 +01:00
winbindnestedgroups.xml Moving docs tree to docs-xml to make room for generated docs in the release tarball. 2008-04-23 08:47:48 -05:00
winbindnormalizenames.xml s3/doc: some spelling fixes 2012-06-11 23:16:26 +02:00
winbindnssinfo.xml docs: fix type for winbind nss info parameter 2014-02-02 23:43:56 +01:00
winbindofflinelogon.xml docs: update winbind offline logon example to be consistent with default 2014-01-28 17:26:40 +13:00
winbindreconnectdelay.xml Here is a re-working of the winbindd 2008-08-20 16:24:22 -07:00
winbindrefreshtickets.xml docs: update winbind refresh tickets example to be consistent with default 2014-01-28 17:26:40 +13:00
winbindrequesttimeout.xml s3: winbindd: Add new parameter "winbind request timeout" set to 60 seconds with man page. 2014-07-29 21:08:12 +02:00
winbindrpconly.xml docs: fix type for winbind rpc only parameter 2014-02-02 23:43:45 +01:00
winbindsealedpipes.xml docs-xml: update 'winbind sealed pipes' description 2014-01-07 12:47:06 +01:00
winbindseparator.xml docs: insert meta data into winbind separator parameter 2014-02-02 23:43:34 +01:00
winbindtrusteddomainsonly.xml Document idmap rewrite 2008-08-12 11:28:29 +02:00
winbindusedefaultdomain.xml s3: Add a word of warning about "winbind use default domain" 2010-11-22 23:26:11 +01:00