pam_nt_dom and winbind problems

[Tim Potter]

Luke McKee writes:

> pam_winbind.so doesn't work for me. Doesn't log anything and doesn't do
> any network traffic. :-(

Have you configured pam_winbind in various configuration files in
/etc/pam.d?  You usually have to add something like:

auth optional pam_winbind.so

before your required pam_unix line and:

account sufficient pam_winbind.so

before the required pam_unix.so line.  Basically pam needs to be
configured to check for winbind users *before* unix users and
then drop out of the pam stack if a winbind user is present.  

A word of warning: playing with the pam configuration files can
be dangerous if you don't know what you are doing.  I find it
useful to leave a root window somewhere to undo stuff that
doesn't work.  (-:


Tim.