W2K Domain Login Problem with 2.2.0
tpot at samba.org
Sun Apr 22 10:55:37 GMT 2001
Jeremy Allison writes:
> > Dont do that! Samba is broken unless it checks an accounts validity
> > before allowing a user to access it. If we are using winbind, my
> > understanding is that we are providing the PAM modules anyway - in which
> > case the winbind pam module should handle this as for all other
> > authentications.
> I'm going to check this out on Monday when I'm in at work
> with a working winbindd setup. There is a pam_winbind.so
> module created by the Makefile but it's not installed by
> default on an RPM system.
> We need to make sure it's built and tested and installed
> by the Samba rpm before turning this on.
The pam_winbind module is pretty rudimentary at the moment.
Logins worked nicely last time I checked, but the chauthtok
function for password changing has some horrible hardcoded stuff
It's still in the "proof of concept" stage.
More information about the samba-technical