[Samba] sernet debian missing winbind in pam-auth-update ( small bug )

L.P.H. van Belle belle at bazuin.nl
Wed Mar 18 02:18:13 MDT 2015


Hai, 
 
anybody noticed that when you run "pam-auth-update"  on debian
and you use sernet-samba that the winbind options are missing. 
 
so, a simple fix here just run the part here below and now pam-auth-update is usable. 
no manual editing needed any more for winbind auth on debian. 
 
and below is just a copy of the debian winbind version, i only added the "Conflicts line" 
 
 
cat << EOF > /usr/share/pam-configs/sernet-winbind
Name: Sernet-Winbind NT/Active Directory authentication
Default: yes
Priority: 192
Auth-Type: Primary
Conflicts: winbind
Auth:
        [success=end default=ignore]    pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass
Auth-Initial:
        [success=end default=ignore]    pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login
Account-Type: Primary
Account:
        [success=end new_authtok_reqd=done default=ignore]      pam_winbind.so
Password-Type: Primary
Password:
        [success=end default=ignore]    pam_winbind.so use_authtok try_first_pass
Password-Initial:
        [success=end default=ignore]    pam_winbind.so
Session-Type: Additional
Session:
        optional                        pam_winbind.so
EOF
 
 


More information about the samba mailing list