mirror of
https://github.com/samba-team/samba.git
synced 2025-01-22 22:04:08 +03:00
64b720d284
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
29 lines
1.3 KiB
XML
29 lines
1.3 KiB
XML
<samba:parameter name="winbind expand groups"
|
|
context="G"
|
|
type="integer"
|
|
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
|
|
<description>
|
|
<para>This option controls the maximum depth that winbindd
|
|
will traverse when flattening nested group memberships
|
|
of Windows domain groups. This is different from the
|
|
<smbconfoption name="winbind nested groups"/> option
|
|
which implements the Windows NT4 model of local group
|
|
nesting. The "winbind expand groups"
|
|
parameter specifically applies to the membership of
|
|
domain groups.</para>
|
|
|
|
<para>Be aware that a high value for this parameter can
|
|
result in system slowdown as the main parent winbindd daemon
|
|
must perform the group unrolling and will be unable to answer
|
|
incoming NSS or authentication requests during this time.</para>
|
|
|
|
<para>The default value was changed from 1 to 0 with Samba 4.2.
|
|
Some broken applications calculate the group memberships of
|
|
users by traversing groups, such applications will require
|
|
"winbind expand groups = 1". But the new default makes winbindd more reliable
|
|
as it doesn't require SAMR access to domain controllers of trusted domains.</para>
|
|
</description>
|
|
|
|
<value type="default">0</value>
|
|
</samba:parameter>
|