192 |
- |
1 |
[General]
|
|
|
2 |
#Verbosity = 0
|
|
|
3 |
# The following should be set to the local NFSv4 domain name
|
|
|
4 |
# The default is the host's DNS domain name.
|
|
|
5 |
#Domain = local.domain.edu
|
|
|
6 |
|
|
|
7 |
# In multi-domain environments, some NFS servers will append the identity
|
|
|
8 |
# management domain to the owner and owner_group in lieu of a true NFSv4
|
|
|
9 |
# domain. This option can facilitate lookups in such environments. If
|
|
|
10 |
# set to a value other than "none", the nsswitch plugin will first pass
|
|
|
11 |
# the name to the password/group lookup function without stripping the
|
|
|
12 |
# domain off. If that mapping fails then the plugin will try again using
|
|
|
13 |
# the old method (comparing the domain in the string to the Domain value,
|
|
|
14 |
# stripping it if it matches, and passing the resulting short name to the
|
|
|
15 |
# lookup function). Valid values are "user", "group", "both", and
|
|
|
16 |
# "none". The default is "none".
|
|
|
17 |
#No-Strip = none
|
|
|
18 |
|
|
|
19 |
# Winbind has a quirk whereby doing a group lookup in UPN format
|
|
|
20 |
# (e.g. staff@americas.example.com) will cause the group to be
|
|
|
21 |
# displayed prefixed with the full domain in uppercase
|
|
|
22 |
# (e.g. AMERICAS.EXAMPLE.COM\staff) instead of in the familiar netbios
|
|
|
23 |
# name format (e.g. AMERICAS\staff). Setting this option to true
|
|
|
24 |
# causes the name to be reformatted before passing it to the group
|
|
|
25 |
# lookup function in order to work around this. This setting is
|
|
|
26 |
# ignored unless No-Strip is set to either "both" or "group".
|
|
|
27 |
# The default is "false".
|
|
|
28 |
#Reformat-Group = false
|
|
|
29 |
|
|
|
30 |
# The following is a comma-separated list of Kerberos realm
|
|
|
31 |
# names that should be considered to be equivalent to the
|
|
|
32 |
# local realm, such that <user>@REALM.A can be assumed to
|
|
|
33 |
# be the same user as <user>@REALM.B
|
|
|
34 |
# If not specified, the default local realm is the domain name,
|
|
|
35 |
# which defaults to the host's DNS domain name,
|
|
|
36 |
# translated to upper-case.
|
|
|
37 |
# Note that if this value is specified, the local realm name
|
|
|
38 |
# must be included in the list!
|
|
|
39 |
#Local-Realms =
|
|
|
40 |
|
|
|
41 |
[Mapping]
|
|
|
42 |
|
|
|
43 |
#Nobody-User = nobody
|
|
|
44 |
#Nobody-Group = nobody
|
|
|
45 |
|
|
|
46 |
[Translation]
|
|
|
47 |
|
|
|
48 |
# Translation Method is an comma-separated, ordered list of
|
|
|
49 |
# translation methods that can be used. Distributed methods
|
|
|
50 |
# include "nsswitch", "umich_ldap", and "static". Each method
|
|
|
51 |
# is a dynamically loadable plugin library.
|
|
|
52 |
# New methods may be defined and inserted in the list.
|
|
|
53 |
# The default is "nsswitch".
|
|
|
54 |
#Method = nsswitch
|
|
|
55 |
|
|
|
56 |
# Optional. This is a comma-separated, ordered list of
|
|
|
57 |
# translation methods to be used for translating GSS
|
|
|
58 |
# authenticated names to ids.
|
|
|
59 |
# If this option is omitted, the same methods as those
|
|
|
60 |
# specified in "Method" are used.
|
|
|
61 |
#GSS-Methods = <alternate method list for translating GSS names>
|
|
|
62 |
|
|
|
63 |
#-------------------------------------------------------------------#
|
|
|
64 |
# The following are used only for the "static" Translation Method.
|
|
|
65 |
#-------------------------------------------------------------------#
|
|
|
66 |
[Static]
|
|
|
67 |
|
|
|
68 |
# A "static" list of GSS-Authenticated names to
|
|
|
69 |
# local user name mappings
|
|
|
70 |
|
|
|
71 |
#someuser@REALM = localuser
|
|
|
72 |
|
|
|
73 |
|
|
|
74 |
#-------------------------------------------------------------------#
|
|
|
75 |
# The following are used only for the "umich_ldap" Translation Method.
|
|
|
76 |
#-------------------------------------------------------------------#
|
|
|
77 |
|
|
|
78 |
[UMICH_SCHEMA]
|
|
|
79 |
|
|
|
80 |
# server information (REQUIRED)
|
|
|
81 |
LDAP_server = ldap-server.local.domain.edu
|
|
|
82 |
|
|
|
83 |
# the default search base (REQUIRED)
|
|
|
84 |
LDAP_base = dc=local,dc=domain,dc=edu
|
|
|
85 |
|
|
|
86 |
#-----------------------------------------------------------#
|
|
|
87 |
# The remaining options have defaults (as shown)
|
|
|
88 |
# and are therefore not required.
|
|
|
89 |
#-----------------------------------------------------------#
|
|
|
90 |
|
|
|
91 |
# whether or not to perform canonicalization on the
|
|
|
92 |
# name given as LDAP_server
|
|
|
93 |
#LDAP_canonicalize_name = true
|
|
|
94 |
|
|
|
95 |
# absolute search base for (people) accounts
|
|
|
96 |
#LDAP_people_base = <LDAP_base>
|
|
|
97 |
|
|
|
98 |
# absolute search base for groups
|
|
|
99 |
#LDAP_group_base = <LDAP_base>
|
|
|
100 |
|
|
|
101 |
# Set to true to enable SSL - anything else is not enabled
|
|
|
102 |
#LDAP_use_ssl = false
|
|
|
103 |
|
|
|
104 |
# You must specify a CA certificate location if you enable SSL
|
|
|
105 |
#LDAP_ca_cert = /etc/ldapca.cert
|
|
|
106 |
|
|
|
107 |
# Objectclass mapping information
|
|
|
108 |
|
|
|
109 |
# Mapping for the person (account) object class
|
|
|
110 |
#NFSv4_person_objectclass = NFSv4RemotePerson
|
|
|
111 |
|
|
|
112 |
# Mapping for the nfsv4name attribute the person object
|
|
|
113 |
#NFSv4_name_attr = NFSv4Name
|
|
|
114 |
|
|
|
115 |
# Mapping for the UID number
|
|
|
116 |
#NFSv4_uid_attr = UIDNumber
|
|
|
117 |
|
|
|
118 |
# Mapping for the GSSAPI Principal name
|
|
|
119 |
#GSS_principal_attr = GSSAuthName
|
|
|
120 |
|
|
|
121 |
# Mapping for the account name attribute (usually uid)
|
|
|
122 |
# The value for this attribute must match the value of
|
|
|
123 |
# the group member attribute - NFSv4_member_attr
|
|
|
124 |
#NFSv4_acctname_attr = uid
|
|
|
125 |
|
|
|
126 |
# Mapping for the group object class
|
|
|
127 |
#NFSv4_group_objectclass = NFSv4RemoteGroup
|
|
|
128 |
|
|
|
129 |
# Mapping for the GID attribute
|
|
|
130 |
#NFSv4_gid_attr = GIDNumber
|
|
|
131 |
|
|
|
132 |
# Mapping for the Group NFSv4 name
|
|
|
133 |
#NFSv4_group_attr = NFSv4Name
|
|
|
134 |
|
|
|
135 |
# Mapping for the Group member attribute (usually memberUID)
|
|
|
136 |
# The value of this attribute must match the value of NFSv4_acctname_attr
|
|
|
137 |
#NFSv4_member_attr = memberUID
|