[Samba] Looking for AIX Users of Winbind -- Authorization and SSHProblems

[Kevin Newman]

Andrew:

I have the same setup, but is it working with SSH and do you have away to
restrict *which* AD users can log into the box?

That is what I'm interested in here.  Any AD user can log on with telnet,
ftp, or su right now.

Matt:

I don't think pam_access exists for AIX.  Searching for it literally brought
me back to this very thread.


-Kevin

-----Original Message-----
From: Andrew Masterson [mailto:Andrew.Masterson at nuvistaenergy.com] 
Sent: Friday, November 13, 2009 12:24 PM
To: Kevin Newman; samba at lists.samba.org
Subject: RE: [Samba] Looking for AIX Users of Winbind -- Authorization and
SSHProblems

> So, my question to everyone is: is there anyone out there using
Winbind with
> AIX?  If so, have you overcome those 2 issues I'm describing?
> 
> Thanks,
> 
> Kevin
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba



We are using winbind on AIX, and this is my documentation on how I got
it to work:

To use WINBIND:

cp -p /opt/pware/samba/3.0.28/lib/security/WINBIND /usr/lib/security

-------------
edit /usr/lib/security/methods.cfg and add
-------------

WINBIND:
        program = /usr/lib/security/WINBIND
        options = authonly


-------------
edit the default stanza in /etc/security/user to have
-------------

        SYSTEM = "WINBIND OR compat"

-=Andrew