pam_nt_dom and winbind problems

Tim Potter tpot at
Tue May 22 04:34:16 GMT 2001

Luke McKee writes:

> doesn't work for me. Doesn't log anything and doesn't do
> any network traffic. :-(

Have you configured pam_winbind in various configuration files in
/etc/pam.d?  You usually have to add something like:

auth optional

before your required pam_unix line and:

account sufficient

before the required line.  Basically pam needs to be
configured to check for winbind users *before* unix users and
then drop out of the pam stack if a winbind user is present.  

A word of warning: playing with the pam configuration files can
be dangerous if you don't know what you are doing.  I find it
useful to leave a root window somewhere to undo stuff that
doesn't work.  (-:


More information about the samba-technical mailing list