osx man page for idmap_ad

IDMAP_AD(8)															       IDMAP_AD(8)

NAME
       idmap_ad - Samba's idmap_ad Backend for Winbind

DESCRIPTION
       The  idmap_ad  plugin provides a way for Winbind to read id mappings from an AD server that uses RFC2307/SFU schema extensions. This module
       implements only the "idmap" API, and is READONLY. Mappings must be provided  in	advance  by  the  administrator  by  adding  the  posixAc-
       count/posixGroup classess and relative attribute/value pairs to the users and groups objects in AD

IDMAP OPTIONS
       range = low - high
	  Defines the available matching uid and gid range for which the backend is authoritative. Note that the range acts as a filter. If speci-
	  fied any UID or GID stored in AD that fall outside the range is ignored and the corresponding map is discarded. It is intended as a  way
	  to avoid accidental UID/GID overlaps between local and remotely defined IDs.

       schema_mode = <rfc2307 | sfu >
	  Defines  the	schema	that  idmap_ad should use when querying Active Directory regarding user and group information. This can either the
	  RFC2307 schema support included in Windows 2003 R2 or the Service for Unix (SFU) schema.

EXAMPLES
       The following example shows how to retrieve idmappings from our principal and and trusted AD domains. All is needed is to  set  default	to
       yes.  If trusted domains are present id conflicts must be resolved beforehand, there is no guarantee on the order confliting mappings would
       be resolved at this point. This example also shows how to leave a small non conflicting range for local id allocation that may be  used	in
       internal backends like BULTIN.

	    [global]
	    idmap domains = ALLDOMAINS
	    idmap config ALLDOMAINS:backend	 = ad
	    idmap config ALLDOMAINS:default	 = yes
	    idmap config ALLDOMAINS:range	 = 10000 - 300000000

	    idmap alloc backend = tdb
	    idmap alloc config:range	    = 5000 - 9999

AUTHOR
       The  original  Samba  software  and  related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.

																       IDMAP_AD(8)