blob: 73d43a8d9c015891ad8b30568c382d07627bf98b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
'\" t
.\" Title: idmap_hash
.\" Author: [see the "AUTHOR" section]
.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/>
.\" Date: 02/19/2024
.\" Manual: System Administration tools
.\" Source: Samba 4.19.5
.\" Language: English
.\"
.TH "IDMAP_HASH" "8" "02/19/2024" "Samba 4\&.19\&.5" "System Administration tools"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
idmap_hash \- DO NOT USE THIS BACKEND
.SH "DESCRIPTION"
.PP
DO NOT USE THIS PLUGIN The idmap_hash plugin implements a hashing algorithm used to map SIDs for domain users and groups to 31\-bit uids and gids, respectively\&. This plugin also implements the nss_info API and can be used to support a local name mapping files if enabled via the "winbind normalize names" and "winbind nss info" parameters in
/etc/samba/smb\&.conf\&. The module divides the range into subranges for each domain that is being handled by the idmap config\&. The module needs the complete UID and GID range to be able to map all SIDs\&. The lowest value for the range should be the smallest ID available in the system\&. This is normally 1000\&. The highest ID should be set to 2147483647\&. A smaller range will lead to issues because of the hashing algorithm used\&. The overall range to map all SIDs is 0 \- 2147483647\&. Any range smaller than 0 \- 2147483647 will filter some SIDs\&. As we can normally only start with 1000, we are not able to map 1000 SIDs\&. This already can lead to issues\&. The smaller the range the less SIDs can be mapped\&. We do not recommend to use this plugin\&. It will be removed in a future release of Samba\&.
.SH "IDMAP OPTIONS"
.PP
name_map
.RS 4
Specifies the absolute path to the name mapping file used by the nss_info API\&. Entries in the file are of the form "\fIunix name\fR
=
\fIqualified domain name\fR"\&. Mapping of both user and group names is supported\&.
.RE
.SH "EXAMPLES"
.PP
The following example utilizes the idmap_hash plugin for the idmap and nss_info information\&.
.sp
.if n \{\
.RS 4
.\}
.nf
[global]
idmap config * : backend = hash
idmap config * : range = 1000\-2147483647
winbind nss info = hash
winbind normalize names = yes
idmap_hash:name_map = /etc/samba/name_map\&.cfg
.fi
.if n \{\
.RE
.\}
.SH "AUTHOR"
.PP
The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&.
|
