HP CIFS Server Administrator's Guide Version A.03.01.01 (5900-1282, May 2011)

NOTE: If you want to use the default value "\" of the winbind separator parameter in
smb.conf, you should comment out this parameter. By doing this, the testparm and wbinfo
commands can show the correct default separator character "/" without generating an error.
Commenting out the winbind separator parameter with the default value, you must type the
default "\" separator character twice ("\\") when using the wbinfo -n command. For example,
wbinfo -n domain_name\\domain_username.
NOTE:
• The HP CIFS Server does not support the ad option for idmap backend.
• The idmap rid utility requires that the parameter, allow trusted domains = No, must
be specified, as it is not compatible with multiple domain environments. The idmap uid and
idmap gid ranges must also be specified.
Unsupported Parameters or Options
Table 7–2 shows the parameters or options which are not supported by the HP CIFS Server.
Table 15 Unsupported Parameters or Options
This string variable control how winbind retrieves name service information to
construct a user's home directory and login shell. Only the template option is
winbind nss info
functional, the SFU option is not supported by HP CIFS Server. If set to
template, winbind constructs a user's home directory and login shell using the
parameters of template shell and templatehomedir. The default setting
is template
This is a boolean variable. If set to yes, this parameter activates the support for
nested groups. Nested groups are also called local groups or aliases. Nested
winbind nested groups
groups are defined locally on any machine (they are shared between DC's
through their SAM) and can contain users and global groups from any trusted
SAM. To be able to use nested groups, you need to run nss_winbind. This
parameter is not yet supported by HP CIFS Server. You may consider to use net
groupmap. Refer to net groupmap help for detailed information.
A smb.conf Example
An example of smb.conf file is shown below:
[global]
workgroup = DomainA # Doamin name
security = domain or ADS
# Winbindd section
idmap uid = 50000-60000
idmap gid = 50000-60000
idmap backend =
winbind enum users = no
winbind enum groups = no
winbind use default domain = no
winbind cache time = 300
# winbind separator = \
template homedir = /home/%U
template shell = /sbin/sh
[shareA]
path = /tmp/shareA
guest ok = no
writable = yes
106 Winbind Support