From 3985a386deaf4dc67910bddc06728d1d6dd94fbb Mon Sep 17 00:00:00 2001
From: Gerald Carter <jerry@samba.org>
Date: Wed, 13 Jun 2007 20:56:11 +0000
Subject: [PATCH] add smb.conf entry for 'winbind expand groups'

---
 .../winbind/winbindexpandgroups.xml           | 24 +++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 docs/smbdotconf/winbind/winbindexpandgroups.xml

diff --git a/docs/smbdotconf/winbind/winbindexpandgroups.xml b/docs/smbdotconf/winbind/winbindexpandgroups.xml
new file mode 100644
index 00000000000..19b81b3e0ae
--- /dev/null
+++ b/docs/smbdotconf/winbind/winbindexpandgroups.xml
@@ -0,0 +1,24 @@
+<samba:parameter name="winbind expand groups"
+                 context="G"
+		 type="integer"
+                 advanced="1" developer="1"
+                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+	<para>This option controls the maximum depth that winbindd
+              will traverse when flattening nested group memberships
+	      of Windows domain groups.  This is different from the
+	      <smbconfoption name="winbind nested groups"/> option
+              which implements the Windows NT4 model of local group 
+	      nesting.  The &quot;winbind expand groups&quot;
+              parameter specifically applies to the membership of 
+	      domain groups.</para>
+
+	 <para>Be aware that a high value for this parameter can
+	 result in system slowdown as the main parent winbindd daemon
+	 must perform the group unrolling and will be unable to answer
+	 incoming NSS or authentication requests during this time.</para>
+  
+</description>
+
+<value type="default">1</value>
+</samba:parameter>
-- 
2.47.3