[Samba] Problem authenticating users with pam_winbind from trusted domain

Masopust, Christian christian.masopust at siemens.com
Thu Jun 28 11:24:22 GMT 2007


Hi all,
 
i've got a problem in authenticating users from a trusted domain with pam_winbind.
 
smb.conf is:
 
[global]
        workgroup = AAAAA
        server string = CC-Server (SMC CI, Samba %v, %h)
        security = DOMAIN
        machine password timeout = 0
        log file = /var/log/samba/log.%m
        log level = 3
        max log size = 1000
        debug pid = Yes
        debug uid = Yes
        name resolve order = wins lmhosts host
        deadtime = 5
        socket options = TCP_NODELAY SO_KEEPALIVE IPTOS_LOWDELAY
        load printers = No
        machine password timeout = 0
        os level = 0
        lm announce = No
        preferred master = No
        local master = No
        domain master = No
        browse list = No
        dns proxy = No
        wins server = XXX.XXX.XXX.XXX
        kernel oplocks = No
        ldap ssl = no
        utmp = Yes
        idmap uid = 200000-230000
        idmap gid = 50000-60000
        template homedir = /home/%U
        template shell = /bin/bash
        winbind separator = +
        winbind use default domain = Yes
        create mask = 0755
        hide dot files = No
        oplocks = No
        level2 oplocks = No
        dos filetime resolution = Yes
        fake directory create times = Yes
        printing = bsd
        host msdfs = no
        msdfs root = no
 
 
Users from domain AAAAA can login to this system with account (without domain) and
their windows-password.  
 
But, when a user from domain BBBBB (which is trusted to AAAAA) tries to login he always
fails (no mather if he tries with or without adding domain).
 
What am i doing wrong???
 
thanks for your help,
Christian
 
 

___________________________________________________________

        Christian Masopust                                                  

        SIEMENS AG  PSE SMC CI E CM 
        Tel:   +43 (0) 5 1707 26866
        E-mail: christian.masopust at siemens.com
        Addr: Austria, 1210 Vienna, Siemensstraße 90-92, B. 33, Rm. 243
        

        Firma: Siemens Aktiengesellschaft Österreich, Rechtsform: Aktiengesellschaft, 
        Sitz: Wien, Firmenbuchnummer: FN 60562 m, 
        Firmenbuchgericht: Handelsgericht Wien, DVR 0001708 
        ___________________________________________________________



 


More information about the samba mailing list