w2k and authentication

Steve Langasek vorlon at netexpress.net
Wed Apr 25 16:12:24 GMT 2001

Quoting Tom Hudak <thudak at sistina.com>:

> On Wed, Apr 25, 2001 at 10:09:04AM -0500, Steve Langasek wrote:
> >If you're using Linux, replace all 'account' lines in /etc/pam.d/samba
> with
> >this line:

> >  account    sufficient   pam_permit.so
> I'm assuming I'll need to change it back once the bug is worked out?

Entirely your call, actually.  Samba never queried PAM for account status in the
past, so the above line provides equivalence with Samba's previous behavior.  If
you want Samba to honor account authorization as reported by PAM, you would want
to change this line back once the bug is fixed, yes.

> It worked btw, this is awesome. I am so glad I now have a PDC for all the
> winblows machines upstairs and I have a bit less on my plate.


Steve Langasek
postmodern programmer

More information about the samba-ntdom mailing list