[Samba] winbind /etc/pam.d/system-auth

[Andrew Bartlett]

Norman Zhang wrote:
> 
> : > I have setup /etc/pam.d/system-auth as below. But when I login to the
> Linux
> : > Box from KDE3, I get a prompt saying I don't have write access to the
> HOME.
> :
> : pam_mkhomedir doesn't make deep directories, so you need to make the
> : parent directory of your user's homes. So if you use 'template homedir =
> : /home/%D/%u', then you need to make /home/%D where %D is each domain you
> : are supporting.
> 
> /home/%D is created (i.e., /home/My_DOMAIN) and "obey pam restriction = yes"
> is set. But still cannot login from both KDE3 and Network Neighborhood. I
> took out winbind.so from /etc/pam.d/KDE3. But system-auth is the same as
> before. Users are no longer listed as My_DOMAIN\%u.
> 
> When I tried,
> 
> wbinfo -u only %u are listed
> wbinfo -g gives the groups from My_DOMAIN
> wbinfo -t says Secret is bad 0x00000c5

If 'secret is bad' then authentication won't work.  Rejoin the domain.

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net