IDMAP_HASH(1M) System Administration tools IDMAP_HASH(1M)NAMEidmap_hash - Samba's idmap_hash Backend for Winbind
DESCRIPTION
The idmap_hash plugin implements a hashing algorithm used to map SIDs
for domain users and groups to 31-bit uids and gids, respectively. This
plugin also implements the nss_info API and can be used to support a
local name mapping files if enabled via the "winbind normalize names"
and "winbind nss info" parameters in smb.conf.
IDMAP OPTIONS
name_map
Specifies the absolute path to the name mapping file used by the
nss_info API. Entries in the file are of the form "unix name =
qualified domain name". Mapping of both user and group names is
supported.
EXAMPLES
The following example utilizes the idmap_hash plugin for the idmap and
nss_info information.
[global]
idmap config * : backend = hash
idmap config * : range = 1000-4000000000
winbind nss info = hash
winbind normalize names = yes
idmap_hash:name_map = /etc/samba/name_map.cfg
AUTHOR
The original Samba software and related utilities were created by
Andrew Tridgell. Samba is now developed by the Samba Team as an Open
Source project similar to the way the Linux kernel is developed.
ATTRIBUTES
See attributes(5) for descriptions of the following attributes:
┌────────────────────┬─────────────────────────────────┐
│ ATTRIBUTE TYPE │ ATTRIBUTE VALUE │
├────────────────────┼─────────────────────────────────┤
│Availability │ SUNWsmbar, SUNWsmbac, SUNWsmbau │
├────────────────────┼─────────────────────────────────┤
│Interface Stability │ External │
└────────────────────┴─────────────────────────────────┘
NOTES
Source code for Samba is available in the SUNWsmbaS package.
Samba(7) delivers the set of four SMF(5) services as can be seen from
the following example:
$ svcs samba wins winbind swat
STATE STIME FMRI
disabled Apr_21 svc:/network/samba:default
disabled Apr_21 svc:/network/winbind:default
disabled Apr_21 svc:/network/wins:default
disabled Apr_21 svc:/network/swat:default
where the services are:
"samba"
runs the smbd daemon managing the CIFS sessions
"wins"
runs the nmbd daemon enabling the browsing (WINS)
"winbind"
runs the winbindd daemon making the domain idmap
"swat"
Samba Web Administration Tool is a service providing access to
browser-based Samba administration interface and on-line
documentation. The service runs on software loopback network
interface on port 901/tcp, i.e. opening "http://localhost:901/" in
browser will access the SWAT service on local machine.
Please note: SWAT uses HTTP Basic Authentication scheme where user name
and passwords are sent over the network in clear text. In the SWAT case
the user name is root. Transferring such sensitive data is advisable
only on the software loopback network interface or over secure
networks.
Samba 3.6 04/10/2012 IDMAP_HASH(1M)
