Winbind on HPUX11, Totally Stuck, Please Help

Miles Roper mroper at westcoastdhb.org.nz
Mon Jan 27 01:45:00 GMT 2003


this is a email I was sent by a michael at hp on 23/1/2002, which is
basically what I done.

--------

In the meanwhile I got an additional hint about how
to work around the libpam_unix.1 issue, which is not
tolerating unknown nsswitch backends to be configured
in /etc/nsswitch.conf when doing password management.
This makes /usr/bin/passwd stop working.

In case LDAP is not being used, one might move
/usr/lib/libnss_ldap.1 aside (if present) and create a
symbolic link from /usr/lib/libnss_ldap.1 to
/usr/lib/libnss_winbind.1.

Consequently, ldap should then be configured instead
of winbind in /etc/nsswitch.conf.

It's kind of ugly hack, but the only workaround
available right now...

--------

-----Original Message-----
From: Richard Sharpe [mailto:rsharpe at richardsharpe.com]
Sent: Monday, 27 January 2003 03:05 p.m.
To: Miles Roper
Cc: 'samba at lists.samba.org'; 'samba-technical at lists.samba.org'
Subject: Re: Winbind on HPUX11, Totally Stuck, Please Help


On Mon, 27 Jan 2003, Miles Roper wrote:

Let me first say that I am no expert on HP-UX, maybe Tim Potter can help, 
now that he works for them.

> I can do a wbinfo -u and get the user names, and a wbinfo -g returns the
> groups.  I had to specify the password to use first with 
> 
> wbinfo -A user%password
> 
> I also joined the domain sucessfully with

OK, this looks like winbindd is sort of works ...

> /etc/nsswitch.conf to
> 
> hosts: dns     [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue]
files
> [
> passwd: files ldap
> group: files ldap
> 
> notice it is ldap, rather than winbind.  The reason for this is, if you
set
> it to winbind you get a error about not being a supported type, ie must be
> nis, ldap or files.

I think this is where your problem is. ldap is not winbindd.

It looks like PAM on your version of HP-UX does not handle arbritrary NSS 
shared library stuff.

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com



More information about the samba-technical mailing list