bug in pam_winbind

Tim Potter tpot at samba.org
Thu Mar 7 15:23:04 GMT 2002


On Thu, Mar 07, 2002 at 12:08:47PM -0500, Lin Li wrote:

> I now set the pam conf like this:
> account    sufficient    pam_unix_acct.so
> account    required    pam_winbind.so
> Is this OK?

These look like they do the same thing.  I think the account rule for 
pam_winbind.so just checks to see if the user exists using getpwnam().

The fix is to check the account disabled bit in the valid_user()
function in pam_winbind.c





More information about the samba-technical mailing list