[Samba] sernet debian missing winbind in pam-auth-update ( small bug )
L.P.H. van Belle
belle at bazuin.nl
Wed Mar 18 02:18:13 MDT 2015
Hai,
anybody noticed that when you run "pam-auth-update" on debian
and you use sernet-samba that the winbind options are missing.
so, a simple fix here just run the part here below and now pam-auth-update is usable.
no manual editing needed any more for winbind auth on debian.
and below is just a copy of the debian winbind version, i only added the "Conflicts line"
cat << EOF > /usr/share/pam-configs/sernet-winbind
Name: Sernet-Winbind NT/Active Directory authentication
Default: yes
Priority: 192
Auth-Type: Primary
Conflicts: winbind
Auth:
[success=end default=ignore] pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass
Auth-Initial:
[success=end default=ignore] pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login
Account-Type: Primary
Account:
[success=end new_authtok_reqd=done default=ignore] pam_winbind.so
Password-Type: Primary
Password:
[success=end default=ignore] pam_winbind.so use_authtok try_first_pass
Password-Initial:
[success=end default=ignore] pam_winbind.so
Session-Type: Additional
Session:
optional pam_winbind.so
EOF
More information about the samba
mailing list