[Samba] pam_smbpass.so passdb.tdb support

Kandukuru_Suresh at emc.com Kandukuru_Suresh at emc.com
Sat Jul 3 07:50:02 MDT 2010


Dear JHT,
  Thanks for the quick reply.in
http://www.samba.org/samba/history/samba-3.4.0.html .
Samba team is recommending to use tdbsam.just wanted to know one thing,
from samba 3.4 default backend  has been changed to tdbsam , why for one
of the module "pam_smbpass" in samba code is still looking for passwords
in smbpasswd?.is there any patch for that?. will this be removed in
higher versions of samba than > 3.4?.
I find several people asking the question on net.did not find any
answer.anticipating your reply.
 
Configuration changes
=====================

!!! ATTENTION !!!
The default passdb backend has been changed to 'tdbsam'! That breaks
existing
setups using the 'smbpasswd' backend without explicit declaration!
Please use
'passdb backend = smbpasswd' if you would like to stick to the
'smbpasswd'
backend or convert your smbpasswd entries using e.g. 'pdbedit -i
smbpasswd -e
tdbsam'.

The 'tdbsam' backend is much more flexible concerning per user settings
like 'profile path' or 'home directory' and there are some commands
which do not
work with the 'smbpasswd' backend at all.
-------------------------

Thanks
Suresh



-----Original Message-----
From: samba-bounces at lists.samba.org
[mailto:samba-bounces at lists.samba.org] On Behalf Of John H Terpstra
Sent: Saturday, July 03, 2010 6:31 PM
To: samba at lists.samba.org
Subject: Re: [Samba] pam_smbpass.so passdb.tdb support

On 07/03/2010 05:29 AM, Kandukuru_Suresh at emc.com wrote:
> Hi,
> 
>   Recently I have installed samba 3.4.8 on  my device. Since  then ftp
> (vsftp,proftpd)   which is taking users from samba database with
> pam_smbpass.so is not working. After enabling  detailed log I have
> noticed it is looking for the passwords in  smbpasswd
> (/etc/samba/private) which is of zero size . I think all users passwd
> are located in passwd.tdb.I could fix this by giving "passdb
> backend=smbpasswd" .
> 
>  
> 
> somewhere I read smbpasswd is obsolete , and recommended to use tdbsam
> ..
> 
>  
> 
> and /etc/pam.d/ftp file is 
> ---------------------
> root at storage:/# cat /etc/pam.d/ftp
> auth       required     /lib/security/pam_smbpass.so
> account    required     /lib/security/pam_nologin.so
> account    required     /lib/security/pam_smbpass.so
> password   required     /lib/security/pam_smbpass.so
> session    required     /lib/security/pam_unix.so
> 
> -------------------
> 
>  
> 
> How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?.
Please
> tell me I have been trying for last 2 days. Did  not find anything.

You can not do that without changing the pam_smbpasswd code. This module
specifically operates against the smbpasswd file.

-John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



More information about the samba mailing list