src/man/idmap_sss.8.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE reference PUBLIC "-//OASIS//DTD DocBook V4.4//EN"
"http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">
<reference>
<title>SSSD Manual pages</title>
<refentry>
    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/upstream.xml" />

    <refmeta>
        <refentrytitle>idmap_sss</refentrytitle>
        <manvolnum>8</manvolnum>
    </refmeta>

    <refnamediv id='name'>
        <refname>idmap_sss</refname>
        <refpurpose>SSSD's idmap_sss Backend for Winbind</refpurpose>
    </refnamediv>

    <refsect1 id='description'>
        <title>DESCRIPTION</title>
        <para>
            The idmap_sss module provides a way to call SSSD to map UIDs/GIDs
            and SIDs. No database is required in this case as the mapping is
            done by SSSD.
        </para>
    </refsect1>

    <refsect1>
        <title>IDMAP OPTIONS</title>

        <variablelist>
            <varlistentry>
                <term>range = low - high</term>
                <listitem><para>
                  Defines the available matching UID and GID range for which the
                  backend is authoritative.
                </para></listitem>
            </varlistentry>
        </variablelist>
    </refsect1>

    <refsect1>
        <title>EXAMPLES</title>
        <para>
            This example shows how to configure idmap_sss as the default mapping
            module.
        </para>

        <programlisting format="linespecific">
[global]
security = ads
workgroup = &lt;AD-DOMAIN-SHORTNAME&gt;

idmap config &lt;AD-DOMAIN-SHORTNAME&gt; : backend        = sss
idmap config &lt;AD-DOMAIN-SHORTNAME&gt; : range          = 200000-2147483647

idmap config * : backend        = tdb
idmap config * : range          = 100000-199999
        </programlisting>

        <para>
            Please replace &lt;AD-DOMAIN-SHORTNAME&gt; with the NetBIOS domain
            name of the AD domain. If multiple AD domains should be used each
            domain needs an <literal>idmap config</literal> line with
            <literal>backend = sss</literal> and a line with a suitable
            <literal>range</literal>.
        </para>
        <para>
            Since Winbind requires a writeable default backend and idmap_sss is
            read-only the example includes <literal>backend = tdb</literal> as
            default.
        </para>
    </refsect1>

    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/seealso.xml" />

</refentry>
</reference>