[Samba] SMBPASSWD to Authenticate Unix Logins

[Corey Hart]

Well I figured it out for myself:  First thing you want to do is remove excute permissions from
authconfig.  The next thing you want to do is modify /etc/pam.d/system-auth to look like this:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_smbpass.so nodelay
#auth        sufficient    /lib/security/pam_unix.so likeauth nullok
auth        required      /lib/security/pam_deny.so

account     required      /lib/security/pam_unix.so

password    required      /lib/security/pam_cracklib.so retry=3 type=
password    sufficient    /lib/security/pam_smbpass.so debug nullok use_authok
#password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5 sha
dow
password    required      /lib/security/pam_deny.so

session     required      /lib/security/pam_limits.so
#session     required      /lib/security/pam_unix.so

What I have done here is removed testing the password against pam_unix or better know as
/etc/passwd.

This is ment for people who want to allow logins onto the unix server and have their passwords
verified by smbpasswd instead of the local /etc/password.



Corey Hart wrote:

> Hello,
>
> I am trying to find out some more information for using pam_smbpasswd.so to authenticate my
> unix logins.  I am running RH 8.0 and running samba2.2.8a with --pam_smbpass compiled.
>
> --
> ----
> Corey Hart
> Systems/Security Analyst
> St. Edward's University
> coreyh at admin.stedwards.edu
> 512/428-1038 - voice
> 512/448-8492 - fax
> 512/470-8462 - cell
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

--
----
Corey Hart
Systems/Security Analyst
St. Edward's University
coreyh at admin.stedwards.edu
512/428-1038 - voice
512/448-8492 - fax
512/470-8462 - cell