WINBINDD(8) System Administration tools WINBINDD(8) (NAME) winbindd - (NSS) NT (SYNOPSIS) winbindd [-D|--daemon] [-i|--interactive] [-F|--foreground] [--no-process-group] [-n|--no-caching] [-d ] [--debug-stdout] [--configfile=] [--option==] [-l|--log-basename ] [--leak-report] [--leak-report-full] [-V|--version] (DESCRIPTION) samba(7) . winbindd << >> (Name Service Switch) C PAM ntlm_auth . winbind nsswitch (Domain Controllers) smbd ntlm_auth PAM pam_winbind.so . idmap config * : range . ( << netlogon>> `netlogon proxy only mode' .) << >> (NSS) NIS DNS . /etc/nsswitch.conf . . winbindd `winbind' Windows NT . PAM . pam_winbind auth account password . account ()getpwnam uid . libnss_winbind . nsswitch winbindd : hosts IRIX . hosts(5) gethostbyname(3) . WINS ( ) . passwd passwd(5) getpwent(3) . group group(5) getgrent(3) . /etc/nsswitch.conf /etc/passwd /etc/group Windows NT . passwd: files winbind group: files winbind ## only available on IRIX: use winbind to resolve hosts: # hosts: files dns winbind ## All other NSS enabled systems should use libnss_wins.so like this: hosts: files dns wins /etc/nsswitch.conf /etc/hosts WINS . hosts: files wins (OPTIONS) -D|--daemon . winbindd . -i|--interactive winbindd . winbindd . winbindd -S . -F|--foreground winbindd (double-fork) . . winbindd (process supervisors) supervise svscan daemontools . AIX . --no-process-group winbindd . -n|--no-caching () . winbindd . . DC winbindd . samlogon . -d|--debuglevel=level level 0 10 . 0 . . 0 . 1 - . 1 . 3 . log level /etc/samba/smb.conf ( ). --debug-stdout STDOUT . . --configfile=CONFIGFILE . printcap . /etc/samba/smb.conf . . --option== smb.conf(5) "" "" . ( ). option=name=value-- . -l|--log-basename=logdirectory /. log.winbindd log.wb- . winbindd . --leak-report talloc . --leak-report-full talloc . -V|--version . -?|--help . --usage . (NAME AND ID RESOLUTION) Windows NT (SID) . Windows NT SID . winbindd . winbindd . ( ) (enumeration) . . : SID winbindd . winbindd rid Windows NT . (CONFIGURATION) winbindd smb.conf(5) . [global] smb.conf . o winbind separator o idmap config * : range o idmap config * : backend o winbind cache time o winbind enum users o winbind enum groups o template homedir o template shell o winbind use default domain o winbind: rpc only winbindd LDAP RPC . (EXAMPLE SETUP) winbindd . Red Hat Linux . /etc/nsswitch.conf : passwd: files winbind group: files winbind /etc/pam.d/* auth : auth required /lib/security/pam_securetty.so auth required /lib/security/pam_nologin.so auth sufficient /lib/security/pam_winbind.so auth required /lib/security/pam_unix.so \ use_first_pass shadow nullok PAM pam_unix pam_pwdb . pam_unix2 pam_unix . sufficient use_first_pass . account : account required /lib/security/pam_winbind.so . net : net join -S PDC -U Administrator -U (administrator) . IP (PDC) "PDC" . libnss_winbind.so /lib pam_winbind.so /lib/security . (symlink) /lib/libnss_winbind.so /lib/libnss_winbind.so.2 . glibc /lib/libnss_winbind.so.1 . smb.conf(5) : [global] winbind separator = + winbind cache time = 10 template shell = /bin/bash template homedir = /home/%D/%U idmap config * : range = 10000-20000 workgroup = DOMAIN security = domain password server = * winbindd NT DOMAIN+user . getent passwd getent group winbindd . (NOTES) winbindd : PAM . PAM . PAM . winbindd winbindd . idmap config * : backend . SID NT . (SIGNALS) winbindd . SIGHUP smb.conf(5) winbindd . . winbindd . SIGHUP smbcontrol(1) . SIGUSR2 SIGUSR2 winbindd winbind . log file . (FILES) /etc/nsswitch.conf(5) (NSS). /run/samba/winbindd/pipe () winbindd . winbind winbindd /run/samba/winbindd /run/samba/winbindd/pipe (root) . winbindd socket directory . $STATEDIR/winbindd_privileged/pipe << >> (privileged) winbindd . winbindd - ntlm_auth - . 'root' $STATEDIR/winbindd_privileged 'squid' ntlm_auth . winbind winbindd $STATEDIR/winbindd_privileged $STATEDIR/winbindd_privileged/pipe (root) . state dir STATEDIR$ . /lib/libnss_winbind.so.X (NSS). $STATEDIR/winbindd_idmap.tdb rid NT / . --with-statedir state dir . /var/lib/samba . $LOCKDIR/winbindd_cache.tdb . (VERSION) 4.24.6 . (SEE ALSO) nsswitch.conf(5), samba(7), wbinfo(1), ntlm_auth(8), smb.conf(5), pam_winbind(8) (AUTHORS) (Andrew Tridgell) . . wbinfo winbindd (Tim Potter) . DocBook 2.2 (Gerald Carter) . DocBook XML 4.2 3.0 (Alexander Bokovoy) . Samba 4.24.6 08/16/2026 WINBINDD(8)