[SCM] Samba Shared Repository - branch master updated

[Jim McDonough]

The branch, master has been updated
       via  2c50bdf docs: Improve wording around 'winbind expand groups' param
      from  05beefd s3:winbind: unmapped Unix users must be resolved locally

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 2c50bdfed06e7eff645a76dad8971eb425c3165e
Author: Noel Power <noel.power at suse.com>
Date:   Thu Sep 28 12:28:46 2017 +0100

    docs: Improve wording around 'winbind expand groups' param
    
    Signed-off-by: Noel Power <noel.power at suse.com>
    
    Reviewed-by: Volker Lendecke <vl at samba.org>
    Reviewed-by: Jim McDonough <jmcd at samba.org>
    
    Autobuild-User(master): Jim McDonough <jmcd at samba.org>
    Autobuild-Date(master): Fri Sep 29 22:37:08 CEST 2017 on sn-devel-144

-----------------------------------------------------------------------

Summary of changes:
 docs-xml/smbdotconf/winbind/winbindexpandgroups.xml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml b/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
index 941ba04..5a05ecf 100644
--- a/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
+++ b/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml
@@ -12,16 +12,23 @@
               parameter specifically applies to the membership of 
 	      domain groups.</para>
 
+	 <para>This option also affects the return of non nested
+	 group memberships of Windows domain users. With the
+	 new default "winbind expand groups = 0" winbind does
+	 not query group memberships at all.</para>
+
 	 <para>Be aware that a high value for this parameter can
 	 result in system slowdown as the main parent winbindd daemon
 	 must perform the group unrolling and will be unable to answer
 	 incoming NSS or authentication requests during this time.</para>
 
 	<para>The default value was changed from 1 to 0 with Samba 4.2.
-	Some broken applications calculate the group memberships of
+	Some broken applications (including some implementations of
+	newgrp and sg) calculate the group memberships of
 	users by traversing groups, such applications will require
-	"winbind expand groups = 1". But the new default makes winbindd more reliable
-	as it doesn't require SAMR access to domain controllers of trusted domains.</para>
+	"winbind expand groups = 1". But the new default makes winbindd
+	more reliable as it doesn't require SAMR access to domain
+	controllers of trusted domains.</para>
 </description>
 
 <value type="default">0</value>


-- 
Samba Shared Repository