[Samba] Making winbindd and pam_mount play nice together

Bradley Wendelboe bradley.wendelboe at polarisind.com
Fri Jun 6 14:38:22 GMT 2003


I've gotten winbind and pam_mount to play nice, only to run into a bug in
glibc that hangs the smbmount...

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=82820

>From the author of pam_mount:

>I did find some behavior in pam_mount that was non-conducive to local
>accounts.  
>That is now fixed in pam_mount 0.9.2, available at http://www.flyn.org.  Go
>get it.
>
>More importantly, service configuration files in /etc/pam.d must be
>configured in a special way to support mixed local and non-local accounts.
>After you get the new pam_mount. Model your configuration files after this:

.
auth	required	/lib/security/pam_mount.so
auth	sufficient	/lib/security/pam_winbind.so	use_first_pass
auth	required	/lib/security/pam_unix.so	use_first_pass

I also added:
session   optional /lib/security/pam_mount.so use_first_pass
.

-----Original Message-----
From: jim feldman [mailto:jmf at jim-liesl.org] 
Sent: Monday, June 02, 2003 9:59 PM
To: samba list
Subject: RE: [Samba] Making winbindd and pam_mount play nice together

Did you join the box to the domain
Did you set security to be domain and passwword to encrypted?
Is the AD server in mixed mode?
Are you configuring the "right" pam module for the login as per the FAQ?
Is wbinfo returning the users and groups? 

jim 

 

Date: Mon, 2 Jun 2003 11:07:04 +1000
From: "John Simovic" <jsimovic at rydesc-h.schools.nsw.edu.au>
Subject: RE: [Samba] Making winbindd and pam_mount play nice together
	(2ndtry)
To: "Andrew Bartlett" <abartlet at samba.org>
Cc: samba at lists.samba.org
Message-ID:
	
<CB5DFC3826CDAA48A8FA15A9E83D47131CEBB8 at mail.rydesc-h.schools.nsw.edu.au>
	
Content-Type: text/plain; charset="windows-1252" 

I have winbind working except it will not let me authenticate users against 
the
Active Directory. Thsi leads me to the conclusion that my PAM files are not
right. I have posted then here. PLease help me! 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



More information about the samba mailing list