[Samba] CryptoCard - PAM or RADIUS?
Russell Handorf
rhandorf at handorf.org
Tue Sep 19 13:59:13 GMT 2006
Greetings all,
I'm working on attempting to get SAMBA to work with a product line
called CryptoCard. I *should* be able to get it to work one of two ways,
either through the use of CryptoCard's provided PAM module, or through
RADIUS authentication.
Currently, I cannot seem to get PAM authentication to work at all. This
is what is in the 'samba' file for PAM:
auth required /lib/security/pam_cap_auth.so
server=<insertSERVERipHERE>:624 noeus debug echo
auth requires /lib/security/pam_nologin.so
account required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_permit.so
session required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_console.so
password required /lib/security/pam_stack.so service=system-auth
And for the smb.conf file I have the all important setting of 'encrypt
passwords = No' to enable PAM authentication
When attempting to authenticate locally, from the server to the server,
I get:
smbclient -U rhandorf -L \\\\localhost
Password:
session setup failed: NT_STATUS_UNSUCCESSFUL
and in the error logs I get:
[2006/09/18 13:42:36, 0] auth/pampass.c:smb_pam_auth(535)
smb_pam_auth: PAM: UNKNOWN ERROR while authenticating user rhandorf
[2006/09/18 13:42:36, 0] auth/pampass.c:smb_pam_passcheck(810)
smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User rhandorf !
I've looked around to see whether or not SAMBA supports RADIUS
Authentication, and I havent seen any documentation that totally says
'yes.'
Asking the vendor yielded the response of "SAMBA then isnt PAM aware;
We'd like to support it, but until it is PAM aware we wont."
Any help would be great.
r
More information about the samba
mailing list