W2K Domain Login Problem with 2.2.0

[Andrew Bartlett]

Jeremy Allison wrote:
> 
> I'm coming to the conclusion that Simo came up with the
> best idea. We compile with pam on systems that support it,
> but ship with an smb.conf "use pam = no" by default.
> 
> That way people who want to descend into the undocumented
> hell :-) that is a pam module can do so in full knowledge
> of what they're getting into.... :-).
> 

Documentation we can fix, but restricting users from accessing disabled
accounts requires PAM.  If we do take this route, the least we should do
is tell admins why their edicts are being blatently ignored (and the use
pam = yes will fix it).

Andrew Bartlett

-- 
Andrew Bartlett
abartlet at pcug.org.au