[Samba] winbind initgroups problem with 2.2.5 on RH 7.2

[Sam Snow]

That unfortunately did not change anything...

> Try moving the
>
> auth       sufficient   /lib/security/pam_winbind.so
>
> line to the top of the auth stack.
>
> Josh Konkol, CNE MCSE
> Senior Network Analyst
>
>  .~.	GuideOne Insurance
>  /V\	Mail Stop AB-1
> /( )\	515-267-2427
> ^^-^^	jkonkol at guidemail.com
>
>
>> -----Original Message-----
>> From: Sam & Lisa Snow [mailto:2snows at interfold.com]
>> Sent: Tuesday, August 20, 2002 10:20 PM
>> To: samba at lists.samba.org
>> Subject: [Samba] winbind initgroups problem with 2.2.5 on RH 7.2
>>
>>
>> Hello,
>>
>> I am trying to get winbind up and working for logins. Here is my error
>> message from /var/messages:
>> Aug 20 20:59:51 aslan pam_winbind[32713]: user 'lisa.snow'
>> granted acces
>> Aug 20 20:59:51 aslan pam_winbind[32713]: user 'lisa.snow'
>> granted acces
>> Aug 20 20:59:51 aslan login[32713]: initgroups: Operation not
>> permitted
>>
>>
>> Here is my pam.d/login file:
>>
>> #%PAM-1.0
>>
>> # orginal before winbind
>> # auth       required   /lib/security/pam_securetty.so
>> # auth       required   /lib/security/pam_stack.so service=system-auth
>> # auth       required   /lib/security/pam_nologin.so
>>
>> # added for winbind
>> auth       required     /lib/security/pam_securetty.so
>> auth       required     /lib/security/pam_nologin.so
>> auth       sufficient   /lib/security/pam_winbind.so
>> auth       required     /lib/security/pam_pwdb.so
>> use_first_pass shadow
>> nullok
>> account    sufficient   /lib/security/pam_winbind.so
>>
>> # original
>> account    required     /lib/security/pam_stack.so service=system-auth
>> password   required     /lib/security/pam_stack.so service=system-auth
>> session    required     /lib/security/pam_stack.so service=system-auth
>> session    optional     /lib/security/pam_console.so
>> session    required     /lib/security/pam_mkhomedir.so skel=/etc/skel/
>>
>> Any other information I should be providing? Winbind is checking the
>> password correctly, so at least I am half way there! Looking
>> through the
>> archives I see several recent references to people having the
>> same error
>> message, but no solutions posted yet ;-).
>>
>> Thanks,
>> Sam
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  http://lists.samba.org/mailman/listinfo/samba
>>