solution: account expired

Florian Petri flop at flop.swb.de
Tue May 8 17:59:59 GMT 2001


On Mon, May 07, 2001 at 05:27:25PM -0500, Steve Langasek wrote:

> > Some of you maybe get "account disabled ... " when they try to login at NT4 or
> > W2K workstations and don't know where this comes from, because they can access the samba server eg. with the same accounts without any problem.
> > (log.smbd show some unknown errors ...)
> 
> > The PAM service at my linux box was wrong configured. I used pam_unix.so in
> > /etc/pam.d/samba but it seems to me that I have to install pam_pwdb.so (parameters: md5 shadow) to login at my nt4 box.
> 
> > Problably this could be documented somewhere, I spend a couple of hours on
> > this and some others posted the same problems, I hope this helps you ...
> 
> This is a combination of a bug in Samba 2.2.0, and a bug in some versions of
> pam_unix.  I believe the most current version of pam_unix should work ok -- if
> not, I'd appreciate knowing about it.  

My version is new, the debian unstable version from april 18.
If there is a newer version available today, I think you wouldn?t find it 
in a binary distribution (package version 0.72-22). 

> Samba 2.2.1 (which should be out any day now, right? :) will solve the problem for previous versions of pam_unix.

Hopefully ...

> For backwards-compatibility with Samba 2.0, which did not do PAM account
> authorization checks, use pam_permit instead of pam_unix.

I tried this and it worked, too. Because this is a updated module on my
system, I?ll use this.

> I don't personally have access to document this anywhere official, I'm afraid
> :)

jerry at samba.org will recieve something from me.


cu Floh





More information about the samba-ntdom mailing list