svn commit: samba r13895 - branches/SAMBA_3_0/source/nsswitch trunk/source/nsswitch

Guenther Deschner gd at
Thu Mar 9 16:14:59 GMT 2006

Hi Volker,

On Mon, Mar 06, 2006 at 08:18:19PM +0000, vlendec at wrote:
> Author: vlendec
> Date: 2006-03-06 20:18:18 +0000 (Mon, 06 Mar 2006)
> New Revision: 13895
> WebSVN:
> Log:
> As agreed upon with gd on the phone, remove WBFLAG_PAM_CONTACT_TRUSTDOM. This
> can not work for NTLM auth, where we only have a workstation account for our
> own domain. For the PAM Kerberos login we need to find a better way to do
> this, probably using Dsr_GetDCName and some winbind-crafted krb5.conf.

The interesting thing is that it *was* working (just verified with two NT4
domains) and that it is *still* working after your patch. Apparently there
is no extra work required to make a login with pam_winbind work using
NTLM. Checking the krb5 case next. 

Still wondering...


Günther Deschner                    GPG-ID: 8EE11688
Novell / SUSE LINUX                       gd at
Samba Team                              gd at
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :

More information about the samba-technical mailing list