mirror of
https://github.com/samba-team/samba.git
synced 2025-01-20 14:03:59 +03:00
-
154 lines
3.4 KiB
Groff
154 lines
3.4 KiB
Groff
.\" This manpage has been automatically generated by docbook2man
|
|
.\" from a DocBook document. This tool can be found at:
|
|
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
|
|
.\" Please send any bug reports, improvements, comments, patches,
|
|
.\" etc. to Steve Cheng <steve@ggi-project.org>.
|
|
.TH "SMBGROUPEDIT" "8" "01 October 2002" "" ""
|
|
.SH NAME
|
|
smbgroupedit \- Query/set/change UNIX - Windows NT group mapping
|
|
.SH SYNOPSIS
|
|
|
|
\fBsmbroupedit\fR [ \fB-v [l|s]\fR ] [ \fB-a UNIX-groupname [-d NT-groupname|-p privilege|]\fR ]
|
|
|
|
.SH "DESCRIPTION"
|
|
.PP
|
|
This program is part of the Samba
|
|
suite.
|
|
.PP
|
|
The smbgroupedit command allows for mapping unix groups
|
|
to NT Builtin, Domain, or Local groups. Also
|
|
allows setting privileges for that group, such as saAddUser,
|
|
etc.
|
|
.SH "OPTIONS"
|
|
.TP
|
|
\fB-v[l|s]\fR
|
|
This option will list all groups available
|
|
in the Windows NT domain in which samba is operating.
|
|
.RS
|
|
.TP
|
|
\fB-l\fR
|
|
give a long listing, of the format:
|
|
|
|
|
|
.nf
|
|
"NT Group Name"
|
|
SID :
|
|
Unix group :
|
|
Group type :
|
|
Comment :
|
|
Privilege :
|
|
.fi
|
|
|
|
For examples,
|
|
|
|
|
|
.nf
|
|
Users
|
|
SID : S-1-5-32-545
|
|
Unix group: -1
|
|
Group type: Local group
|
|
Comment :
|
|
Privilege : No privilege
|
|
.fi
|
|
.TP
|
|
\fB-s\fR
|
|
display a short listing of the format:
|
|
|
|
|
|
.nf
|
|
NTGroupName(SID) -> UnixGroupName
|
|
.fi
|
|
|
|
For example,
|
|
|
|
|
|
.nf
|
|
Users (S-1-5-32-545) -> -1
|
|
.fi
|
|
.RE
|
|
.SH "FILES"
|
|
.PP
|
|
.SH "EXIT STATUS"
|
|
.PP
|
|
\fBsmbgroupedit\fR returns a status of 0 if the
|
|
operation completed successfully, and a value of 1 in the event
|
|
of a failure.
|
|
.SH "EXAMPLES"
|
|
.PP
|
|
To make a subset of your samba PDC users members of
|
|
the 'Domain Admins' Global group:
|
|
.TP 3
|
|
1.
|
|
create a unix group (usually in
|
|
\fI/etc/group\fR), let's call it domadm.
|
|
.TP 3
|
|
2.
|
|
add to this group the users that you want to be
|
|
domain administrators. For example if you want joe, john and mary,
|
|
your entry in \fI/etc/group\fR will look like:
|
|
|
|
domadm:x:502:joe,john,mary
|
|
.TP 3
|
|
3.
|
|
map this domadm group to the 'domain admins' group:
|
|
.RS
|
|
.TP 3
|
|
1.
|
|
Get the SID for the Windows NT "Domain Admins"
|
|
group:
|
|
|
|
|
|
.nf
|
|
root# \fBsmbgroupedit -vs | grep "Domain Admins"\fR
|
|
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1
|
|
.fi
|
|
.TP 3
|
|
2.
|
|
map the unix domadm group to the Windows NT
|
|
"Domain Admins" group, by running the command:
|
|
|
|
|
|
.nf
|
|
root# \fBsmbgroupedit \\
|
|
-c S-1-5-21-1108995562-3116817432-1375597819-512 \\
|
|
-u domadm\fR
|
|
.fi
|
|
|
|
\fBwarning:\fR don't copy and paste this sample, the
|
|
Domain Admins SID (the S-1-5-21-...-512) is different for every PDC.
|
|
.RE
|
|
.PP
|
|
To verify that your mapping has taken effect:
|
|
.PP
|
|
|
|
.nf
|
|
root# \fBsmbgroupedit -vs|grep "Domain Admins"\fR
|
|
Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> domadm
|
|
.fi
|
|
.PP
|
|
To give access to a certain directory on a domain member machine (an
|
|
NT/W2K or a samba server running winbind) to some users who are member
|
|
of a group on your samba PDC, flag that group as a domain group:
|
|
.PP
|
|
|
|
.nf
|
|
root# \fBsmbgroupedit -a unixgroup -td\fR
|
|
.fi
|
|
.SH "VERSION"
|
|
.PP
|
|
This man page is correct for the 3.0alpha releases of
|
|
the Samba suite.
|
|
.SH "SEE ALSO"
|
|
.PP
|
|
smb.conf(5)
|
|
.SH "AUTHOR"
|
|
.PP
|
|
The original Samba software and related utilities
|
|
were created by Andrew Tridgell. Samba is now developed
|
|
by the Samba Team as an Open Source project similar
|
|
to the way the Linux kernel is developed.
|
|
.PP
|
|
\fBsmbgroupedit\fR was written by Jean Francois Micouleau.
|
|
The current set of manpages and documentation is maintained
|
|
by the Samba Team in the same fashion as the Samba source code.
|