[Samba] Home Directory Winbind

[Tim Hodgkinson]

Finally saw what the problem was -- on my [homes] path = /home/users/%u 
which should be %U for NT users. Used authconf to handle the pam.d config 
for winbind.

Again thanks for the help!

--Tim

----- Original Message ----- 
From: "Ivano Cristofolini" <icristof at ing.unitn.it>
To: "samba" <samba at skibanff.com>
Cc: <samba at lists.samba.org>
Sent: Thursday, September 16, 2004 12:29 PM
Subject: Re: [Samba] Home Directory Winbind


>I haven't tried it myself but I think samba calls the PAM stack with
> the logging user's  privileges while pam_mkhomedir needs to be called as
> root to work (like telnet servers and such do).
> Bye,
>
> -------------------------
> Ivano Cristofolini
> Presidio Informatico Ingegneria
> Direzione Informatica e Telecomunicazioni
> Università degli Studi di Trento
> Via Mesiano 77,
> 38050 Povo(TN), Italy
> Tel: +39 0461/881940
> Fax: +39 0461/882628
>
> On Thu, 16 Sep 2004, samba wrote:
>
>> LOL! Thanks for the second pair of eyes.
>>
>> Of course now it is saying that pam has rejected the session. Will 
>> continue
>> to work on it.
>>
>> Thanks for your help!
>>
>> --Tim
>>
>> ----- Original Message ----- 
>> From: "Ivano Cristofolini" <icristof at ing.unitn.it>
>> To: "Tim Hodgkinson" <tim.hodgkinson at skibanff.com>
>> Cc: <samba at lists.samba.org>
>> Sent: Thursday, September 16, 2004 11:10 AM
>> Subject: Re: [Samba] Home Directory Winbind
>>
>>
>> > Looks like it could just be homes/home mismatch.
>> > Bye,
>> >
>> > ------------------------
>> > Ivano Cristofolini
>> > Presidio Informatico Ingegneria
>> > Direzione Informatica e Telecomunicazioni
>> > Università degli Studi di Trento
>> > Via Mesiano 77,
>> > 38050 Povo(TN), Italy
>> > Tel: +39 0461/881940
>> > Fax: +39 0461/882628
>> >
>> > On Thu, 16 Sep 2004, Tim Hodgkinson wrote:
>> >
>> >> Greetings,
>> >>
>> >> Trying to find a solution to creating home directories by using 
>> >> winbind.
>> >> Have this setup:
>> >>
>> >>  /etc/pam.d/system-auth:
>> >>
>> >> session     required      /lib/security/pam_mkhomedir.so 
>> >> skel=/etc/skel/
>> >> umask=0077
>> >>
>> >> With smb.conf:
>> >>
>> >> # Global parameters
>> >> [global]
>> >>         workgroup = domain
>> >>         server string = Monarch Server
>> >>         security = DOMAIN
>> >>         map to guest = Bad User
>> >>         obey pam restrictions = Yes
>> >>         password server = server
>> >>         log level = 3
>> >>         syslog = 0
>> >>         log file = /var/log/samba/%m
>> >>         max log size = 50
>> >>         name resolve order = wins lmhosts host bcast
>> >>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>> >>         printcap name = /etc/printcap
>> >>         preferred master = No
>> >>         local master = No
>> >>         domain master = No
>> >>         dns proxy = No
>> >>         wins server = 172.16.1.100,
>> >>         idmap uid = 10000-20000
>> >>         idmap gid = 10000-20000
>> >>         template homedir = /home/users/%U
>> >>         winbind separator = +
>> >>         winbind use default domain = Yes
>> >>         read only = No
>> >>         hosts allow = 172., 127.
>> >>
>> >> [homes]
>> >>         comment = %U Directories
>> >>         path = /homes/users/%U
>> >>         browseable = No
>> >>
>> >> Winbind creates the directory in /home/users/:
>> >>
>> >> drwx------  2 thodgkinson Domain Users 4096 Sep 15 16:25 thodgkinson
>> >>
>> >> The problem is that I can not access the directory when browsing to 
>> >> it.
>> >>
>> >> tail /var/log/samba/blah:
>> >>
>> >> '/homes/users/thodgkinson' does not exist or is not a directory, when
>> >> connecting to [thodgkinson]
>> >>
>> >> Where have I gone wrong? Ideas?
>> >>
>> >> Cheers,
>> >>
>> >> Tim
>> >> --
>> >> To unsubscribe from this list go to the following URL and read the
>> >> instructions:  http://lists.samba.org/mailman/listinfo/samba
>> >>
>> >>
>> >
>> > -- 
>> > To unsubscribe from this list go to the following URL and read the
>> > instructions:  http://lists.samba.org/mailman/listinfo/samba
>> >
>>
>>
>
>