bug in pam_winbind
tpot at samba.org
Thu Mar 7 15:23:04 GMT 2002
On Thu, Mar 07, 2002 at 12:08:47PM -0500, Lin Li wrote:
> I now set the pam conf like this:
> account sufficient pam_unix_acct.so
> account required pam_winbind.so
> Is this OK?
These look like they do the same thing. I think the account rule for
pam_winbind.so just checks to see if the user exists using getpwnam().
The fix is to check the account disabled bit in the valid_user()
function in pam_winbind.c
More information about the samba-technical