[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?

[Matt Finlayson]

The work around That I have developed for this is diagramed as follows:

------------     -----------      -----------------------------------
| linux    |<--->| samba 2 |<---->| Samba 3   user info, passwords  |
| clients  |     | Server  |      | Server     File share           |
------------     | authN   |      -----------------------------------
                  -----------                  ^
                                               |
------------                                  |
| Windows  |<---------------------------------/
| Clients  |
------------

After countless configurations, rebuild and even OS reinstalls from 
square one I got the above to work.  Samba 2 server acts as a domain 
member server and passes user auth to the samba 3 server.

I do not know how this relates but as I stated in previous posts, if I 
try to authenticate linus directly against Samba 3 using Pam module the 
following error shows in the samba log

  [2005/11/17 14:21:53, 3] smbd/connection.c:yield_connection(76)
      yield_connection: tdb_delete for name  failed with error Record
does not exist.

When I investigate user info with pdbedit I see the the NT username 
value is blank.  I have seen posting that state it is an unused value. 
Maybe it is not related at all, but it makes me curious...

Thanks,


BTW, pam_winbindd is not an option.

-- 
Matt Finlayson
Information Technology Specialist
School of Engineering and Computer Science
Washington State University Vancouver
360-546-9481

It has been said, “A day that is without troubles is not fulfilling.
Rather, give me a day of troubles well handled so that I can be content
with my achievements.”



Andrew Bartlett wrote:
> On Mon, 2005-11-28 at 10:46 -0800, Matt Finlayson wrote:
> 
>>I am having trouble getting pam_smb_auth.so to work with the latest 
>>version of samba.  It was working with the 2.* versions but when I tried 
>>to upgrade to Samba 3 authentication fails on the client.
>>
>>I do not know if I need to reconfigure samba to work with 
>>pam_smb_auth.so,  I have tried man options.  Please also refer to:
> 
> 
> You mention that you are thinking of using pam_winbindd.  I strongly
> suggest that option.
> 
> Andrew Bartlett
>