Add smb.conf entry for "winbind nested groups"

diff --git a/docs/smbdotconf/winbind/winbindnestedgroups.xml b/docs/smbdotconf/winbind/winbindnestedgroups.xml
new file mode 100644 (file)
index 0000000..255fc9a
--- /dev/null
+++ b/docs/smbdotconf/winbind/winbindnestedgroups.xml
@@ -0,0 +1,19 @@
+<samba:parameter name="winbind nested groups"
+                 context="G"
+                                type="boolean"
+                 advanced="1" developer="1"
+                 xmlns:samba="http://samba.org/common">
+<description>
+       <para>If set to yes, this parameter activates the support for nested
+                 groups. Nested groups are also called local groups or
+                 aliases. They work like their counterparts in Windows: Nested
+                 groups are defined locally on any machine (they are shared
+                 between DC's through their SAM) and can contain users and
+                 global groups from any trusted SAM. To be able to use nested
+                 groups, you need to run nss_winbind.</para>
+                <para>Please note that per 3.0.3 this is a new feature, so 
+                handle with care.</para>
+</description>
+
+<value type="default">no</value>
+</samba:parameter>