[Samba] Re: home directories with winbind

[gints neimanis]

Yes, it is possible with pam_mkhomedir

For example, that configurations works very well:
  /etc/pam.d/system-auth
====
#%PAM-1.0

auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_winbind.so
auth        sufficient    /lib/security/pam_unix.so likeauth nullok 
use_first_pass
auth        required      /lib/security/pam_deny.so

account     sufficient    /lib/security/pam_winbind.so
account     required      /lib/security/pam_unix.so

password    required      /lib/security/pam_cracklib.so retry=3 minlen=2 
  dcredit=0  ucredit=0
password    sufficient    /lib/security/pam_unix.so nullok use_authtok 
md5 shadow
password    required      /lib/security/pam_deny.so

session     required      /lib/security/pam_mkhomedir.so skel=/etc/skel/ 
umask=0022
session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so
====

Gints

pascal.gregis at wanadoo.fr wrote:
> Hello all,
> 
> I've installed samba-3.0.1 on a linux machine that has a role of
> domainmember
> in an NT domain.
> What I would like is that there would be nothing to do on the linux
> machine when adding a user in teh NT domain.
> For that I have started and configured winbind that works fine.
> But I want to create a share for each user on the NT domain. 
> I have in my smb.conf a [homes] share, but when a user is added to the
> NT
> domain, the directory of his share is not created automatically.
> I presume it's normal, but it's reducing to 0 the role of winbind,
> because I have to create a directory on the linux machine each time a
> user is added to the domain, so a script creating the user at the smae
> time as the share could do the work. 
> So with or without winbind I have an operation to do on the linux
> machine while I would like to have no operation to do.
> Is there a way to do that? A possibility to execute a script
> automatically where a user is created on the domain or anything, but
> the template homedir parameter doesn't seem to do this.
> 
> Thank you
> 
> --
> Thundax