.\"Generated by db2man.xsl. Don't modify this, modify the source.
.de Sh \" Subsection
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Ip \" List item
.br
.ie \\n(.$>=3 .ne \\$3
.el .ne 3
.IP "\\$1" \\$2
..
.TH "IDMAP_NSS" 1M "" "" ""
.SH "NAME"
idmap_nss - Samba's idmap_nss Backend for Winbind
.SH "DESCRIPTION"
.PP
The idmap_nss plugin provides a means to map Unix users and groups to Windows accounts and obseletes the "winbind trusted domains only" smb.conf option. This provides a simple means of ensuring that the SID for a Unix user named jsmith is reported as the one assigned to DOMAIN\jsmith which is necessary for reporting ACLs on files and printers stored on a Samba member server.
.SH "EXAMPLES"
.PP
This example shows how to use idmap_nss to check the local accounts for its own domain while using allocation to create new mappings for trusted domains

.nf

	[global]
	    idmap domains = SAMBA TRUSTEDDOMAINS

	    idmap config SAMBA:backend  = nss
	    idmap config SAMBA:readonly = yes

	    idmap config TRUSTEDDOMAINS:default = yes
	    idmap config TRUSTEDDOMAINS:backend = tdb
	    idmap config TRUSTEDDOMAINS:range   = 10000 - 50000

	    idmap alloc backend      = tdb
	    idmap alloc config:range = 10000 - 50000
	
.fi
.SH "AUTHOR"
.PP
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.