[Samba] RE: Samba 3.0.28a under Solaris 8 + libnss_winbind.so problem?

[Dietrich Streifert]

Hi,

does your /etc/nsswitch.conf contain the winbind name service modules? 
This should look like this:

passwd:     files winbind
group:      files winbind




Oliver Weinmann schrieb:
> Hi,
>
> I'm really lost with this problem. Here is my /etc/pam.conf, maybe
> someone can help me, the system still keeps kicking me out of telnet and
> local console. id and group commands are now working, group is not
> working on every user.
>
> #
> #ident "@(#)pam.conf 1.14 99/09/16 SMI"
> #
> # Copyright (c) 1996-1999, Sun Microsystems, Inc.
> # All Rights Reserved.
> #
> # PAM configuration
> #
> # Authentication management
> #
> login   auth required   /usr/lib/security/pam_winbind.so
> login auth required  /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
> login auth required  /usr/lib/security/$ISA/pam_dial_auth.so.1
> try_first_pass
> #
> rlogin  auth sufficient /usr/lib/security/pam_winbind.so
> rlogin  auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
> rlogin auth required  /usr/lib/security/$ISA/pam_unix.so.1
> try_first_pass
> #
> dtlogin auth sufficient /usr/lib/security/pam_winbind.so
> dtlogin auth required  /usr/lib/security/$ISA/pam_unix.so.1
> try_first_pass
> #
> rsh auth required /usr/lib/security/$ISA/pam_rhosts_auth.so.1
> other   auth sufficient /usr/lib/security/pam_winbind.so
> other auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
> #
> # Account management
> #
> login   account sufficient      /usr/lib/security/pam_winbind.so
> login account requisite /usr/lib/security/$ISA/pam_roles.so.1
> login account required /usr/lib/security/$ISA/pam_unix.so.1
> #
> dtlogin account sufficient      /usr/lib/security/pam_winbind.so
> dtlogin account requisite /usr/lib/security/$ISA/pam_roles.so.1
> dtlogin account required /usr/lib/security/$ISA/pam_unix.so.1
> #
> other   account sufficient      /usr/lib/security/pam_winbind.so
> other account requisite /usr/lib/security/$ISA/pam_roles.so.1
> other account required /usr/lib/security/$ISA/pam_unix.so.1
> #
> # Session management
> #
> other session required /usr/lib/security/$ISA/pam_unix.so.1
> #
> # Password management
> #
> #other   password sufficient     /usr/lib/security/pam_winbind.so
> other password required /usr/lib/security/$ISA/pam_unix.so.1
> dtsession auth required /usr/lib/security/$ISA/pam_unix.so.1
> #
> # Support for Kerberos V5 authentication (uncomment to use Kerberos)
> #
> #rlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1
> try_first_pass
> #login auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
> #dtlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1
> try_first_pass
> #other auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
> #dtlogin account optional /usr/lib/security/$ISA/pam_krb5.so.1
> #other account optional /usr/lib/security/$ISA/pam_krb5.so.1
> #other session optional /usr/lib/security/$ISA/pam_krb5.so.1
> #other password optional /usr/lib/security/$ISA/pam_krb5.so.1
> try_first_pass
>
> -----Original Message-----
> From: Oliver Weinmann 
> Sent: 04 April 2008 19:34
> To: samba at lists.samba.org
> Subject: Samba 3.0.28a under Solaris 8 + libnss_winbind.so problem?
>
> Hi i compiled Samba 3.0.28a under Solaris 8 (sparc). Everything seems to
> be fine except the libnss_winbind.so.
>  
> i copied it to /usr/lib and linked it to:
>  
> libnss_winbind.so.1
> libnss_winbind.so.2
> nss_winbind.so.1
> nss_winbind.so.1
>  
> now when i type: "id user" nothing happens. The same goes for "group
> user".
>  
> wbinfo -t / -g / -u all work fine. So it must be something with the nss
> I guess?
>
> But it's getting even more strange. After a reboot i can now use "id",
> "group" still doesn't work and my telnet and login session get
> disconnected after a few minutes. If I change the /etc/pam.conf back to
> normal I don't get disconnected. Any ideas where I could look for
> debugging information?
>
> Oliver Weinmann
> Unix/Linux Administrator
>
> VEGA IT GmbH
> Europaplatz 5
> D-64293 Darmstadt
> Germany
> Tel	: +49 (0) 6151 8257 744
> Fax	: +49 (0)6151 8257-799
> Email	: oliver.weinmann at vega.de
> Web	: www.vega-group.com
>   

-- 
Mit freundlichen Grüßen
Dietrich Streifert
--
Visionet GmbH
Firmensitz: Am Weichselgarten 7, 91058 Erlangen
Registergericht: Handelsregister Fürth, HRB 6573
Geschäftsführer: Stefan Lindner