'\" t .\" Title: idmap_hash .\" Author: [see the "AUTHOR" section] .\" Generator: DocBook XSL Stylesheets vsnapshot .\" Date: 08/09/2022 .\" Manual: System Administration tools .\" Source: Samba 4.13.13-Debian .\" Language: English .\" .TH "IDMAP_HASH" "8" "08/09/2022" "Samba 4\&.13\&.13\-Debian" "System Administration tools" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ .\" http://bugs.debian.org/507673 .\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" ----------------------------------------------------------------- .\" * set default formatting .\" ----------------------------------------------------------------- .\" disable hyphenation .nh .\" disable justification (adjust text to left margin only) .ad l .\" ----------------------------------------------------------------- .\" * MAIN CONTENT STARTS HERE * .\" ----------------------------------------------------------------- .SH "NAME" idmap_hash \- DO NOT USE THIS BACKEND .SH "DESCRIPTION" .PP DO NOT USE THIS PLUGIN The idmap_hash plugin implements a hashing algorithm used to map SIDs for domain users and groups to 31\-bit uids and gids, respectively\&. This plugin also implements the nss_info API and can be used to support a local name mapping files if enabled via the "winbind normalize names" and "winbind nss info" parameters in smb\&.conf\&. The module divides the range into subranges for each domain that is being handled by the idmap config\&. The module needs the complete UID and GID range to be able to map all SIDs\&. The lowest value for the range should be the smallest ID available in the system\&. This is normally 1000\&. The highest ID should be set to 2147483647\&. A smaller range will lead to issues because of the hashing algorithm used\&. The overall range to map all SIDs is 0 \- 2147483647\&. Any range smaller than 0 \- 2147483647 will filter some SIDs\&. As we can normally only start with 1000, we are not able to map 1000 SIDs\&. This already can lead to issues\&. The smaller the range the less SIDs can be mapped\&. We do not recommend to use this plugin\&. It will be removed in a future release of Samba\&. .SH "IDMAP OPTIONS" .PP name_map .RS 4 Specifies the absolute path to the name mapping file used by the nss_info API\&. Entries in the file are of the form "\fIunix name\fR = \fIqualified domain name\fR"\&. Mapping of both user and group names is supported\&. .RE .SH "EXAMPLES" .PP The following example utilizes the idmap_hash plugin for the idmap and nss_info information\&. .sp .if n \{\ .RS 4 .\} .nf [global] idmap config * : backend = hash idmap config * : range = 1000\-2147483647 winbind nss info = hash winbind normalize names = yes idmap_hash:name_map = /etc/samba/name_map\&.cfg .fi .if n \{\ .RE .\} .SH "AUTHOR" .PP The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&.