Problems with PAM in Samba 2.2.0?

[Craig Kelley]

On Mon, 23 Apr 2001, Craig Kelley wrote:

>
> Norman Jordan <njordan at home.com> wrote:
>
> > I have a Samba 2.2.0 PDC set up running Linux and I have a Windows
> > 2000 client computer. The Win2k computer can join the domain, but no
> > one can log in. Everytime I try to logon with the Win2k computer, it
> > says that the account is disabled. I can use the account to browse
> > shares and mount the home directory from the PDC. I have added the
> > account to a group on the Win2k computer.
> >
> > I found the following output in syslog.
> >
> > Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] rpc_server/srv_netlog.c:api_net_sam_logon(177)
> > Apr 21 17:27:38 Venom smbd[7753]:   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
> > Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] rpc_server/srv_pipe.c:api_rpcTNP(1215)
> > Apr 21 17:27:38 Venom smbd[7753]:   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
> > Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] passdb/pampass.c:pam_account(268)
> > Apr 21 17:27:38 Venom smbd[7753]:   PAM: UNKNOWN ERROR for User: thuang Apr 21 17:27:38 Venom smbd[7753]: [2001/04/21 17:27:38, 0] passdb/pampass.c:pam_accountcheck(381)
> > Apr 21 17:27:38 Venom smbd[7753]:   PAM: Account Validation Failed - Rejecting User!
>
> I see the same exact thing.
>
> We have 2.0.7 working just great, but when I upgrade to 2.2.0, it claims
> that all the accounts are "disabled" even though any of them are allowed
> to log in using ssh or at the console just fine.
>
> We're using pam (obviously) on a RedHat Linux 6.1 box.
>
>   -Craig

I forgot to mention that this happens with NT4 boxes as well, not just
Windows 2000 (which I haven't even tested yet).