From: Gerald Carter <jerry@samba.org>
Date: Wed, 13 Jun 2007 20:56:11 +0000 (+0000)
Subject: add smb.conf entry for 'winbind expand groups'
X-Git-Tag: samba-4.0.0alpha6~801^2~1754
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1846e7c767fd20e904f30c7eb719c7d56f56553e;p=thirdparty%2Fsamba.git

add smb.conf entry for 'winbind expand groups'
(This used to be commit 3985a386deaf4dc67910bddc06728d1d6dd94fbb)
---

diff --git a/docs/smbdotconf/winbind/winbindexpandgroups.xml b/docs/smbdotconf/winbind/winbindexpandgroups.xml
new file mode 100644
index 00000000000..19b81b3e0ae
--- /dev/null
+++ b/docs/smbdotconf/winbind/winbindexpandgroups.xml
@@ -0,0 +1,24 @@
+<samba:parameter name="winbind expand groups"
+                 context="G"
+		 type="integer"
+                 advanced="1" developer="1"
+                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+	<para>This option controls the maximum depth that winbindd
+              will traverse when flattening nested group memberships
+	      of Windows domain groups.  This is different from the
+	      <smbconfoption name="winbind nested groups"/> option
+              which implements the Windows NT4 model of local group 
+	      nesting.  The &quot;winbind expand groups&quot;
+              parameter specifically applies to the membership of 
+	      domain groups.</para>
+
+	 <para>Be aware that a high value for this parameter can
+	 result in system slowdown as the main parent winbindd daemon
+	 must perform the group unrolling and will be unable to answer
+	 incoming NSS or authentication requests during this time.</para>
+  
+</description>
+
+<value type="default">1</value>
+</samba:parameter>