[Samba-it] client ubuntu in dominio samba (NT)

[ivan re]

Dopo aver messo nel dominio creato con samba le workstation windows adesso
Devo mettere nel dominio un portatile con ubuntu 9.04.
Ho seguito alcune guide:
http://loziopigna.blogspot.com/2009/04/ubuntu-client-in-samba-domain.html

ma con risultati scarsissimi.

Attualmente la config è:

common-auth:
auth    sufficient      pam_winbind.so
auth    sufficient    pam_unix.so     nullok_secure   use_first_pass

common-account:
account sufficient pam_winbind.so

common-password
password   required   pam_unix.so nullok obscure min=4 max=50 md5

common-session
session required        pam_unix.so
session required        pam_mkhomedir.so        umask=0022
skel=/etc/skel


nsswitch
passwd:         compat winbind
group:          compat winbind

smb.confworkgroup = MIODOM
netbios name = Linux1
password server = PDCsrv

server string = %h - linux workstation
wins support = no
dns proxy = no
name resolve order = host lmhosts bcast

security = domain
encrypt passwords = true
domain master = false
preferred master = false
local master = no
lm announce = false
hosts allow =  192.168.1.248, 127.0.0.1
hosts deny = all
interfaces = 127.0.0.0/8, eth0, lo
bind interfaces only =true

socket options = TCP_NODELAY IPTOS_LOWDELAY
log file = /var/log/samba/%m.log
log level = 3
pam password change = yes

#winbind separator =+
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind offline logon = yes
winbind cache time = 15


ho messo correttamente il client nel dominio  con net rpc join ....
risultato: joined domain

Se digito wbinfo -u o -g  vedo gli utenti o i gruppi di dominio

Quando però tento di fare il login grafico don l'utente root di dominio (ma
anche con altri) mi dice password expired

auth.log:
Jul 30 12:06:11 pc81-Linux gdm[3869]: pam_winbind(gdm:auth): getting
password (0x00000200)
Jul 30 12:06:14 pc81-Linux gdm[3869]: pam_winbind(gdm:auth): user 'root'
granted access
Jul 30 12:06:16 pc81-Linux gdm[3869]: pam_winbind(gdm:account):
pam_sm_acct_mgmt success but PAM_WINBIND_NEW_AUTHTOK_REQD is set
Jul 30 12:06:16 pc81-Linux gdm[3869]: pam_winbind(gdm:account): user 'root'
needs new password
Jul 30 12:06:20 pc81-Linux gdm[3869]: pam_unix(gdm:chauthtok):
authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost=
user=root
Jul 30 12:06:25 pc81-Linux gdm[3869]: pam_winbind(gdm:auth): getting
password (0x00000200)


grazie per l'aiuto

Ivan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/samba-it/attachments/20090730/187d6156/attachment.html>