W2K Domain Login Problem with 2.2.0

[Tim Potter]

Jeremy Allison writes:

> > Dont do that!  Samba is broken unless it checks an accounts validity
> > before allowing a user to access it.  If we are using winbind, my
> > understanding is that we are providing the PAM modules anyway - in which
> > case the winbind pam module should handle this as for all other
> > authentications.
> 
> I'm going to check this out on Monday when I'm in at work
> with a working winbindd setup. There is a pam_winbind.so
> module created by the Makefile but it's not installed by
> default on an RPM system.
> 
> We need to make sure it's built and tested and installed
> by the Samba rpm before turning this on.

The pam_winbind module is pretty rudimentary at the moment.
Logins worked nicely last time I checked, but the chauthtok
function for password changing has some horrible hardcoded stuff
in it.

It's still in the "proof of concept" stage.


Tim.