From: Andreas Schneider Date: Wed, 21 Apr 2021 08:30:56 +0000 (+0200) Subject: docs-xml: Update documentation for removal of NIS support X-Git-Tag: tevent-0.11.0~1045 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a72bc3e15d3ed62e9ad2c0a97ce5d6d653abb048;p=thirdparty%2Fsamba.git docs-xml: Update documentation for removal of NIS support Signed-off-by: Andreas Schneider Reviewed-by: Jeremy Allison --- diff --git a/docs-xml/manpages/smb.conf.5.xml b/docs-xml/manpages/smb.conf.5.xml index b12f67c6334..eb4bcba3ee5 100644 --- a/docs-xml/manpages/smb.conf.5.xml +++ b/docs-xml/manpages/smb.conf.5.xml @@ -627,13 +627,6 @@ chmod 1770 /usr/local/samba/lib/usershares %N This value is the same as %L. - - - %p - - the path of the service's home directory, obtained from your NIS auto.map entry. The NIS - auto.map entry is split up as %N:%p. - diff --git a/docs-xml/smbdotconf/misc/homedirmap.xml b/docs-xml/smbdotconf/misc/homedirmap.xml deleted file mode 100644 index ba70730860a..00000000000 --- a/docs-xml/smbdotconf/misc/homedirmap.xml +++ /dev/null @@ -1,28 +0,0 @@ - - - - If is yes, and smbd - 8 is also acting as a Win95/98 logon server - then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted. - At present, only the Sun auto.home map format is understood. The form of the map is: - -username server:/some/file/system - - and the program will extract the servername from before the first ':'. There should probably be a better parsing system - that copes with different map formats and also Amd (another automounter) maps. - - - - A working NIS client is required on the system for this option to work. - - -nis homedir -domain logons - - -amd.homedir - diff --git a/docs-xml/smbdotconf/misc/nishomedir.xml b/docs-xml/smbdotconf/misc/nishomedir.xml deleted file mode 100644 index ace84759fb2..00000000000 --- a/docs-xml/smbdotconf/misc/nishomedir.xml +++ /dev/null @@ -1,32 +0,0 @@ - - - Get the home share server from a NIS map. For - UNIX systems that use an automounter, the user's home directory - will often be mounted on a workstation on demand from a remote - server. - - When the Samba logon server is not the actual home directory - server, but is mounting the home directories via NFS then two - network hops would be required to access the users home directory - if the logon server told the client to use itself as the SMB server - for home directories (one over SMB and one over NFS). This can - be very slow. - - This option allows Samba to return the home share as - being on a different server to the logon server and as - long as a Samba daemon is running on the home directory server, - it will be mounted on the Samba client directly from the directory - server. When Samba is returning the home share to the client, it - will consult the NIS map specified in - and return the server - listed there. - - Note that for this option to work there must be a working - NIS system and the Samba server with this option must also - be a logon server. - -no - diff --git a/docs-xml/smbdotconf/protocol/nameresolveorder.xml b/docs-xml/smbdotconf/protocol/nameresolveorder.xml index e29eabb87df..b85d060e7ce 100644 --- a/docs-xml/smbdotconf/protocol/nameresolveorder.xml +++ b/docs-xml/smbdotconf/protocol/nameresolveorder.xml @@ -26,7 +26,7 @@ host : Do a standard host name to IP address resolution, using the system - /etc/hosts , NIS, or DNS lookups. This method of name resolution is + /etc/hosts or DNS lookups. This method of name resolution is operating system depended for instance on IRIX or Solaris this may be controlled by the /etc/nsswitch.conf file. Note that this method is used only if the NetBIOS name type being queried is the 0x20 (server) name type or 0x1c (domain controllers). The latter case is only diff --git a/docs-xml/smbdotconf/security/hostsallow.xml b/docs-xml/smbdotconf/security/hostsallow.xml index 8b4b62268a3..a052e7f79cd 100644 --- a/docs-xml/smbdotconf/security/hostsallow.xml +++ b/docs-xml/smbdotconf/security/hostsallow.xml @@ -41,13 +41,6 @@ hosts allow = lapland, arvidsjaur - Example 4: allow only hosts in NIS netgroup "foonet", but - deny access from one particular host - - hosts allow = @foonet - - hosts deny = pirate - Note that access still requires suitable user-level passwords. See testparm diff --git a/docs-xml/smbdotconf/security/invalidusers.xml b/docs-xml/smbdotconf/security/invalidusers.xml index b2fb2b9d293..268cdfad560 100644 --- a/docs-xml/smbdotconf/security/invalidusers.xml +++ b/docs-xml/smbdotconf/security/invalidusers.xml @@ -7,21 +7,8 @@ to login to this service. This is really a paranoid check to absolutely ensure an improper setting does not breach your security. - - A name starting with a '@' is interpreted as an NIS - netgroup first (if your system supports NIS), and then as a UNIX - group if the name was not found in the NIS netgroup database. - A name starting with '+' is interpreted only - by looking in the UNIX group database via the NSS getgrnam() interface. A name starting with - '&' is interpreted only by looking in the NIS netgroup database - (this requires NIS to be working on your system). The characters - '+' and '&' may be used at the start of the name in either order - so the value +&group means check the - UNIX group database, followed by the NIS netgroup database, and - the value &+group means check the NIS - netgroup database, followed by the UNIX group database (the - same as the '@' prefix). + A name starting with a '@' is interpreted UNIX group. The current servicename is substituted for %S. This is useful in the [homes] section. diff --git a/docs-xml/smbdotconf/security/passwdchat.xml b/docs-xml/smbdotconf/security/passwdchat.xml index 23f8e6e1570..a04fc62fdf6 100644 --- a/docs-xml/smbdotconf/security/passwdchat.xml +++ b/docs-xml/smbdotconf/security/passwdchat.xml @@ -14,17 +14,14 @@ received then the password is not changed. This chat sequence is often quite site specific, depending - on what local methods are used for password control (such as NIS - etc). + on what local methods are used for password control. Note that this parameter only is used if the parameter is set to yes. This sequence is then called AS ROOT when the SMB password in the smbpasswd file is being changed, without access to the old password cleartext. This means that root must be able to reset the user's password without - knowing the text of the previous password. In the presence of - NIS/YP, this means that the must - be executed on the NIS master. + knowing the text of the previous password. The string can contain the macro - - If your system supports the NIS NETGROUP option then the netgroup database is checked before the /etc/group database for matching groups. - - You can map Windows usernames that have spaces in them by using double quotes around the name. For example: diff --git a/docs-xml/smbdotconf/security/usernamemapscript.xml b/docs-xml/smbdotconf/security/usernamemapscript.xml index 86118f305bc..7b797cbae1c 100644 --- a/docs-xml/smbdotconf/security/usernamemapscript.xml +++ b/docs-xml/smbdotconf/security/usernamemapscript.xml @@ -10,7 +10,7 @@ command line option (the username transmitted in the authentication request) and return a line on standard output (the name to which the account should mapped). In this way, it is possible to store - username map tables in an LDAP or NIS directory services. + username map tables in an LDAP directory services. diff --git a/docs-xml/smbdotconf/security/validusers.xml b/docs-xml/smbdotconf/security/validusers.xml index 0b681a1fef5..6b0bacfd78a 100644 --- a/docs-xml/smbdotconf/security/validusers.xml +++ b/docs-xml/smbdotconf/security/validusers.xml @@ -4,9 +4,10 @@ xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> - This is a list of users that should be allowed to login to this service. Names starting with - '@', '+' and '&' are interpreted using the same rules as described in the - invalid users parameter. + This is a list of users that should be allowed to login to this service. + Names starting with an '@' are interpreted using the same rules as + described in the + invalid users parameter. diff --git a/docs-xml/smbdotconf/winbind/winbindseparator.xml b/docs-xml/smbdotconf/winbind/winbindseparator.xml index eda14f4e03a..9be46109cd6 100644 --- a/docs-xml/smbdotconf/winbind/winbindseparator.xml +++ b/docs-xml/smbdotconf/winbind/winbindseparator.xml @@ -10,9 +10,9 @@ and nss_winbind.so modules for UNIX services. - Please note that setting this parameter to + causes problems + Please note that setting this parameter to + can cause problems with group membership at least on glibc systems, as the character + - is used as a special character for NIS in /etc/group. + was used as a special character for NIS in /etc/group. \