[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?

Matt Finlayson finlayso at vancouver.wsu.edu
Wed Dec 21 23:08:19 GMT 2005

The work around That I have developed for this is diagramed as follows:

------------     -----------      -----------------------------------
| linux    |<--->| samba 2 |<---->| Samba 3   user info, passwords  |
| clients  |     | Server  |      | Server     File share           |
------------     | authN   |      -----------------------------------
                  -----------                  ^
------------                                  |
| Windows  |<---------------------------------/
| Clients  |

After countless configurations, rebuild and even OS reinstalls from 
square one I got the above to work.  Samba 2 server acts as a domain 
member server and passes user auth to the samba 3 server.

I do not know how this relates but as I stated in previous posts, if I 
try to authenticate linus directly against Samba 3 using Pam module the 
following error shows in the samba log

  [2005/11/17 14:21:53, 3] smbd/connection.c:yield_connection(76)
      yield_connection: tdb_delete for name  failed with error Record
does not exist.

When I investigate user info with pdbedit I see the the NT username 
value is blank.  I have seen posting that state it is an unused value. 
Maybe it is not related at all, but it makes me curious...


BTW, pam_winbindd is not an option.

Matt Finlayson
Information Technology Specialist
School of Engineering and Computer Science
Washington State University Vancouver

It has been said, “A day that is without troubles is not fulfilling.
Rather, give me a day of troubles well handled so that I can be content
with my achievements.”

Andrew Bartlett wrote:
> On Mon, 2005-11-28 at 10:46 -0800, Matt Finlayson wrote:
>>I am having trouble getting pam_smb_auth.so to work with the latest 
>>version of samba.  It was working with the 2.* versions but when I tried 
>>to upgrade to Samba 3 authentication fails on the client.
>>I do not know if I need to reconfigure samba to work with 
>>pam_smb_auth.so,  I have tried man options.  Please also refer to:
> You mention that you are thinking of using pam_winbindd.  I strongly
> suggest that option.
> Andrew Bartlett

More information about the samba mailing list