[Samba] [OT?] Kerberos, PAM, NSS: if user does not exist, pam_krb5 try login?

Marco Gaiarin gaio at sv.lnf.it
Thu Feb 28 10:33:12 UTC 2019


Mandi! L.P.H. van Belle via samba
  In chel di` si favelave...

> logname=admin uid=0 euid=0  << no no.. Uid=0 ? Thats not good, root = uid 0

It is the standard log of pam susbsystem, also for ldap.


> Administrator is mapped through /etc/samba/smb.conf ( usermapping)

No, louis; i'm speaking about machine where samba is even not
installed; i've simply created some users (in /etc/passwd) and added
pam_krb5 to (also) authenticate against. No samba (so the 'OT' ;-).


I'm simply curious why pam_ldapd seems that never try to login agains
LDAP server, if user does not exist, while pam_krb5 seems yes.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list