Problems with PAM in Samba 2.2.0?

[Craig Kelley]

Norman Jordan <njordan at home.com> wrote:

> I have a Samba 2.2.0 PDC set up running Linux and I have a Windows
> 2000 client computer. The Win2k computer can join the domain, but no
> one can log in. Everytime I try to logon with the Win2k computer, it
> says that the account is disabled. I can use the account to browse
> shares and mount the home directory from the PDC. I have added the
> account to a group on the Win2k computer.
>
> I found the following output in syslog.
>
> Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] rpc_server/srv_netlog.c:api_net_sam_logon(177)
> Apr 21 17:27:38 Venom smbd[7753]:   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
> Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] rpc_server/srv_pipe.c:api_rpcTNP(1215)
> Apr 21 17:27:38 Venom smbd[7753]:   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
> Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] passdb/pampass.c:pam_account(268)
> Apr 21 17:27:38 Venom smbd[7753]:   PAM: UNKNOWN ERROR for User: thuang Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] passdb/pampass.c:pam_accountcheck(381)
> Apr 21 17:27:38 Venom smbd[7753]:   PAM: Account Validation Failed - Rejecting User!

I see the same exact thing.

We have 2.0.7 working just great, but when I upgrade to 2.2.0, it claims
that all the accounts are "disabled" even though any of them are allowed
to log in using ssh or at the console just fine.

We're using pam (obviously) on a RedHat Linux 6.1 box.

  -Craig