[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-1822-g6d91ac2

[Steven Danneman]

The branch, master has been updated
       via  6d91ac2a646ae47d359914503030cab51b2c9d16 (commit)
      from  5264ad627d59e0f2cb03cb3bdd3baf8943d7fa5b (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 6d91ac2a646ae47d359914503030cab51b2c9d16
Author: Steven Danneman <steven.danneman at isilon.com>
Date:   Fri May 22 16:57:52 2009 -0700

    s3/docs Add manpage for "map untrusted to domain" parameter
    
    This fixes bug 6352.

-----------------------------------------------------------------------

Summary of changes:
 .../smbdotconf/security/mapuntrustedtodomain.xml   |   33 ++++++++++++++++++++
 1 files changed, 33 insertions(+), 0 deletions(-)
 create mode 100644 docs-xml/smbdotconf/security/mapuntrustedtodomain.xml


Changeset truncated at 500 lines:

diff --git a/docs-xml/smbdotconf/security/mapuntrustedtodomain.xml b/docs-xml/smbdotconf/security/mapuntrustedtodomain.xml
new file mode 100644
index 0000000..bcf65e6
--- /dev/null
+++ b/docs-xml/smbdotconf/security/mapuntrustedtodomain.xml
@@ -0,0 +1,33 @@
+<samba:parameter name="map untrusted to domain"
+                 context="G"
+		 type="boolean"
+		 advanced="1"
+		 developer="1"
+		 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+    <para>
+    If a client connects to smbd using an untrusted domain name, such as
+    BOGUS\user, smbd replaces the BOGUS domain with it's SAM name before
+    attempting to authenticate that user.  In the case where smbd is acting as
+    a PDC this will be DOMAIN\user.  In the case where smbd is acting as a
+    domain member server or a standalone server this will be WORKSTATION\user.
+    </para>
+
+    <para>
+    In previous versions of Samba (pre 3.4), if smbd was acting as a domain
+    member server, the BOGUS domain name would instead be replaced by the
+    primary domain which smbd was a member of.  In this case authentication
+    would be deferred off to a DC using the credentials DOMAIN\user.
+    </para>
+
+    <para>
+    When this parameter is set to <constant>yes</constant> smbd provides the
+    legacy behavior of mapping untrusted domain names to the primary domain.
+    When smbd is not acting as a domain member server, this parameter has no
+    effect.
+    </para>
+
+</description>
+
+<value type="default">no</value>
+</samba:parameter>


-- 
Samba Shared Repository