[Samba] Is it sombody who has a working pam.conf for Solaris 9 ?
Patrik Gustavsson PS Sweden Senior Technical Consultant
Patrik.Gustavsson at Sun.COM
Tue Jul 8 08:15:55 GMT 2003
Hi,
I have now a working pam.conf for Solaris 9 with winbind for
telnet, rlogin, ftp, dtsession.
The following changes have been done compered to the default.
diff pam.conf.ORG pam.conf
21,23c21,24
< login auth required pam_dhkeys.so.1
< login auth required pam_unix_auth.so.1
< login auth required pam_dial_auth.so.1
---
> login auth sufficient pam_dhkeys.so.1
> login auth sufficient pam_unix_auth.so.1
> login auth sufficient pam_dial_auth.so.1
> login auth sufficient /usr/lib/security/pam_winbind.so.1
try_first_pass
29,30c30,32
< rlogin auth required pam_dhkeys.so.1
< rlogin auth required pam_unix_auth.so.1
---
> rlogin auth sufficient pam_dhkeys.so.1
> rlogin auth sufficient pam_unix_auth.so.1
> rlogin auth sufficient
/usr/lib/security/pam_winbind.so.1 try_first_pass
49,50c51,53
< other auth required pam_dhkeys.so.1
< other auth required pam_unix_auth.so.1
---
> other auth sufficient pam_dhkeys.so.1
> other auth sufficient pam_unix_auth.so.1
> other auth sufficient /usr/lib/security/pam_winbind.so.1
try_first_pass
65,66c68,70
< other account required pam_projects.so.1
< other account required pam_unix_account.so.1
---
> other account sufficient pam_projects.so.1
> other account sufficient pam_unix_account.so.1
> other account sufficient /usr/lib/security/pam_winbind.so.1
71a76
> other session sufficient /usr/lib/security/pam_winbind.so.1
/Patrik
Patrik Gustavsson PS Sweden Senior Technical Consultant wrote:
> Hi,
>
> I am trying to setup PAM for telnet on my solaris 9 box and the
> pam_winbind
> grant me access but I recieve a acount failure:
>
> Jul 4 13:29:59 clusterix1 pam_winbind[9688]: user 'patrikg' granted
> acces
> Jul 4 13:29:59 clusterix1 login[9688]: login account failure:
> Permission denied
>
> The values in pam.conf for winbind is:
>
> login auth required /usr/lib/security/pam_winbind.so
> other auth sufficient /usr/lib/security/pam_winbind.so
> login account sufficient /usr/lib/security/pam_winbind.so
> other account sufficient /usr/lib/security/pam_winbind.so
> login session sufficient /usr/lib/security/pam_winbind.so
>
> What have I missed ?
>
> /Patrik
> --
> "In a world without fences who needs Gates"
> Patrik Gustavsson, Senior Technical Consultant
> patrik.gustavsson at sun.com Telephone: +46 60 671540
> http://glen.sweden Mobile: +46 70 3551040
> SUN MICROSYSTEMS Fax: +46 60 671550
> --------------------------------------------------------------
>
>
--
"In a world without fences who needs Gates"
Patrik Gustavsson, Senior Technical Consultant
patrik.gustavsson at sun.com Telephone: +46 60 671540
http://glen.sweden Mobile: +46 70 3551040
SUN MICROSYSTEMS Fax: +46 60 671550
--------------------------------------------------------------
More information about the samba
mailing list