I've gone back to 3.0.1 to try and get winbind to work with my Solaris 9
machine and NT4 domain. Everything works except user authentication. The
wbinfo and getent commands do what they are supposed to.
I've included a truss of 'su - ganguly'
According to pamlog, the user 'ganguly' has been granted access but it
is
still hanging.
How do I do a truss of a telnet login?
I'm hoping some one out there is good with Solaris.
Can you help?
Thanks,
Sapan
-------------- next part --------------
execve("/usr/bin/su", 0xFFBFFD44, 0xFFBFFD54) argc = 3
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1,
0) = 0xFF3B0000
resolvepath("/usr/bin/su", "/usr/bin/su", 1023) = 11
resolvepath("/usr/lib/ld.so.1", "/usr/lib/ld.so.1", 1023) =
16
stat("/usr/bin/su", 0xFFBFFB28) = 0
open("/var/ld/ld.config", O_RDONLY) = 3
fstat(3, 0xFFBFF5D0) = 0
mmap(0x00000000, 104, PROT_READ, MAP_SHARED, 3, 0) = 0xFF3A0000
close(3) = 0
open("/usr/local/lib/libcmd.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libcmd.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF390000
mmap(0x00000000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF370000
mmap(0xFF384000, 1131, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
16384) = 0xFF384000
munmap(0xFF374000, 65536) = 0
resolvepath("/usr/lib/libcmd.so.1", "/usr/lib/libcmd.so.1",
1023) = 20
memcntl(0xFF370000, 3720, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libbsm.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libbsm.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 180224, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF340000
mmap(0xFF366000, 14676, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED,
3, 90112) = 0xFF366000
mmap(0xFF36A000, 2520, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFF36A000
munmap(0xFF356000, 65536) = 0
resolvepath("/usr/lib/libbsm.so.1", "/usr/lib/libbsm.so.1",
1023) = 20
memcntl(0xFF340000, 26520, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libproject.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libproject.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF320000
mmap(0xFF334000, 1424, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
16384) = 0xFF334000
munmap(0xFF324000, 65536) = 0
resolvepath("/usr/lib/libproject.so.1",
"/usr/lib/libproject.so.1", 1023) = 24
memcntl(0xFF320000, 5912, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libpam.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libpam.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 98304, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF300000
mmap(0xFF316000, 6315, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
24576) = 0xFF316000
munmap(0xFF306000, 65536) = 0
resolvepath("/usr/lib/libpam.so.1", "/usr/lib/libpam.so.1",
1023) = 20
memcntl(0xFF300000, 6976, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 802816, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF200000
mmap(0xFF2BC000, 24472, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED,
3, 704512) = 0xFF2BC000
mmap(0xFF2C2000, 6588, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFF2C2000
munmap(0xFF2AC000, 65536) = 0
resolvepath("/usr/lib/libc.so.1", "/usr/lib/libc.so.1",
1023) = 18
memcntl(0xFF200000, 117256, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libsocket.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libsocket.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF2E0000
mmap(0xFF2FA000, 4333, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
40960) = 0xFF2FA000
munmap(0xFF2EA000, 65536) = 0
resolvepath("/usr/lib/libsocket.so.1",
"/usr/lib/libsocket.so.1", 1023) = 23
memcntl(0xFF2E0000, 13792, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libnsl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libnsl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 712704, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF100000
mmap(0xFF19E000, 32628, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED,
3, 581632) = 0xFF19E000
mmap(0xFF1A6000, 30800, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFF1A6000
munmap(0xFF18E000, 65536) = 0
resolvepath("/usr/lib/libnsl.so.1", "/usr/lib/libnsl.so.1",
1023) = 20
memcntl(0xFF100000, 81680, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libmd5.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libmd5.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF1E0000
mmap(0xFF1F2000, 456, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
8192) = 0xFF1F2000
munmap(0xFF1E2000, 65536) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1,
0) = 0xFF2D0000
resolvepath("/usr/lib/libmd5.so.1", "/usr/lib/libmd5.so.1",
1023) = 20
memcntl(0xFF1E0000, 1268, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libnsl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libnsl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libsecdb.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libsecdb.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF1C0000
mmap(0xFF1D4000, 1419, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
16384) = 0xFF1D4000
munmap(0xFF1C4000, 65536) = 0
resolvepath("/usr/lib/libsecdb.so.1",
"/usr/lib/libsecdb.so.1", 1023) = 22
memcntl(0xFF1C0000, 5312, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libproc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libproc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
mmap(0x00000000, 163840, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF0D0000
mmap(0xFF0F6000, 4857, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
90112) = 0xFF0F6000
munmap(0xFF0E6000, 65536) = 0
resolvepath("/usr/lib/libproc.so.1",
"/usr/lib/libproc.so.1", 1023) = 21
memcntl(0xFF0D0000, 21460, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libdl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libdl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF390000
resolvepath("/usr/lib/libdl.so.1", "/usr/lib/libdl.so.1",
1023) = 19
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libcmd.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libcmd.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libdl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libdl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libnsl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libnsl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libdl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libdl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libmp.so.2", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libmp.so.2", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF0C0000
mmap(0x00000000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF0A0000
mmap(0xFF0B4000, 849, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
16384) = 0xFF0B4000
munmap(0xFF0A4000, 65536) = 0
resolvepath("/usr/lib/libmp.so.2", "/usr/lib/libmp.so.2",
1023) = 19
memcntl(0xFF0A0000, 2464, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libnsl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libnsl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libcmd.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libcmd.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/librtld_db.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/librtld_db.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF0C0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF0C0000
mmap(0x00000000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF080000
mmap(0xFF094000, 512, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
16384) = 0xFF094000
munmap(0xFF084000, 65536) = 0
resolvepath("/usr/lib/librtld_db.so.1",
"/usr/lib/librtld_db.so.1", 1023) = 24
memcntl(0xFF080000, 2032, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libelf.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libelf.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
mmap(0xFF0C0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF0C0000
mmap(0x00000000, 196608, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF040000
mmap(0xFF06E000, 3584, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
122880) = 0xFF06E000
munmap(0xFF05E000, 65536) = 0
resolvepath("/usr/lib/libelf.so.1", "/usr/lib/libelf.so.1",
1023) = 20
memcntl(0xFF040000, 11292, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF464) = 0
close(3) = 0
open("/usr/platform/SUNW,Ultra-60/lib/libc_psr.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFF2FC) = 0
mmap(0xFF0C0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) =
0xFF0C0000
mmap(0x00000000, 16384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF030000
resolvepath("/usr/platform/sun4u/lib/libc_psr.so.1psr.so.1",
"/usr/platform/sun4u/lib/libc_psr.so.1", 1023) = 37
close(3) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1,
0) = 0xFF020000
munmap(0xFF020000, 8192) = 0
munmap(0xFF0C0000, 8192) = 0
context(2, 0xFFBFF99C)
getrlimit(RLIMIT_STACK, 0xFFBFF994) = 0
getcontext(0xFFBFF7D0)
context(3, 0xFF2C3944)
sigfillset(0xFF2C27F0) = 0
brk(0x00025E70) = 0
brk(0x00027E70) = 0
open("/etc/default/su", O_RDONLY) = 3
llseek(3, 0, SEEK_CUR) = 0
llseek(3, 0, SEEK_SET) = 0
fstat64(3, 0xFFBFEB08) = 0
brk(0x00027E70) = 0
brk(0x00029E70) = 0
fstat64(3, 0xFFBFE9B0) = 0
ioctl(3, TCGETA, 0xFFBFEA94) Err#25 ENOTTY
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
llseek(3, 0xFFFFFFFFFFFFFDD7, SEEK_CUR) = 150
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x0002749C, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x0002749C, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x0002749C, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
llseek(3, 0, SEEK_CUR) = 703
close(3) = 0
fstat64(0, 0xFFBFEBC8) = 0
ioctl(0, TCGETA, 0xFFBFEB54) = 0
stat64("/dev/tty", 0xFFBFEAD0) = 0
stat64("/dev/console", 0xFFBFEAD0) = 0
stat64("/dev/conslog", 0xFFBFEAD0) = 0
stat64("/dev/syscon", 0xFFBFEAD0) = 0
stat64("/dev/systty", 0xFFBFEAD0) = 0
stat64("/dev/wscons", 0xFFBFEAD0) = 0
stat64("/dev/ptmx", 0xFFBFEAD0) = 0
stat64("/dev/ttyp0", 0xFFBFE9C8) = 0
stat64("/dev/ptyp0", 0xFFBFE9C8) = 0
open("/etc/ttysrch", O_RDONLY) = 3
fstat64(3, 0xFFBFE9C8) = 0
read(3, " # i d e n t\t " @ ( # )".., 1400) = 1400
close(3) = 0
stat64("/dev/pts/6", 0xFFBFE9C8) = 0
fstat64(0, 0xFFBFE480) = 0
ioctl(0, TCGETA, 0xFFBFE40C) = 0
open("/etc/ttysrch", O_RDONLY) = 3
fstat64(3, 0xFFBFE280) = 0
close(3) = 0
stat64("/dev/pts/6", 0xFFBFE280) = 0
open("/var/adm/utmpx", O_RDONLY) = 3
fstat64(3, 0xFFBFE3C0) = 0
fstat64(3, 0xFFBFE268) = 0
ioctl(3, TCGETA, 0xFFBFE34C) Err#25 ENOTTY
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0".., 8192) = 5580
llseek(3, 0xFFFFFFFFFFFFFA30, SEEK_CUR) = 4092
close(3) = 0
open64("/var/adm/utmpx", O_RDONLY) = 3
llseek(3, 3720, SEEK_SET) = 3720
read(3, " s a p\0\0\0\0\0\0\0\0\0".., 372) = 372
close(3) = 0
open("/var/adm/sulog", O_WRONLY|O_APPEND|O_CREAT, 0600) = 3
close(3) = 0
chown("/var/adm/sulog", 0, 0) = 0
open("/etc/pam_debug", O_RDONLY) Err#2 ENOENT
stat64("/etc/pam.conf", 0xFFBFEAE8) = 0
open("/etc/pam.conf", O_RDONLY) = 3
mmap(0x00000000, 3731, PROT_READ, MAP_PRIVATE, 3, 0) = 0xFF0C0000
munmap(0xFF0C0000, 3731) = 0
close(3) = 0
uname(0x000251C8) = 1
auditsys(BSM_AUDITCTL, 0x00000014) Err#22 EINVAL
fstat(-1, 0xFFBFEBD8) Err#9 EBADF
sigaction(SIGQUIT, 0xFFBFEBA0, 0xFFBFEC20) = 0
sigaction(SIGINT, 0xFFBFEBA0, 0xFFBFEC20) = 0
open64("/var/run/name_service_door", O_RDONLY) Err#2 ENOENT
open("/etc/nsswitch.conf", O_RDONLY|O_LARGEFILE) = 3
fcntl(3, F_DUPFD, 0x00000100) Err#22 EINVAL
read(3, " #\n # / e t c / n s s".., 1024) = 817
read(3, 0x00028B90, 1024) = 0
close(3) = 0
open("/usr/local/lib/nss_files.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/nss_files.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDF84) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF0C0000
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1,
0) = 0xFF020000
mmap(0x00000000, 98304, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF000000
mmap(0xFF016000, 1744, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
24576) = 0xFF016000
munmap(0xFF006000, 65536) = 0
resolvepath("/usr/lib/nss_files.so.1",
"/usr/lib/nss_files.so.1", 1023) = 23
memcntl(0xFF000000, 6276, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDEC4) = 0
close(3) = 0
open("/usr/local/lib/libnsl.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libnsl.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDEC4) = 0
close(3) = 0
munmap(0xFF0C0000, 8192) = 0
open("/etc/passwd", O_RDONLY) = 3
fstat64(3, 0xFFBFE400) = 0
brk(0x00029E70) = 0
brk(0x0002BE70) = 0
fstat64(3, 0xFFBFE2A8) = 0
ioctl(3, TCGETA, 0xFFBFE38C) Err#25 ENOTTY
read(3, " r o o t : x : 0 : 1 : S".., 8192) = 1120
read(3, 0x000297BC, 8192) = 0
llseek(3, 0, SEEK_CUR) = 1120
close(3) = 0
open("/usr/local/lib/nss_winbind.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/nss_winbind.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDF84) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF0C0000
mmap(0x00000000, 98304, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFEFE0000
mmap(0xFEFF4000, 4060, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
16384) = 0xFEFF4000
mmap(0xFEFF6000, 5312, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFEFF6000
munmap(0xFEFE6000, 57344) = 0
resolvepath("/usr/lib/libnss_winbind.so",
"/usr/lib/libnss_winbind.so", 1023) = 26
memcntl(0xFEFE0000, 5192, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
open("/usr/local/lib/libsocket.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libsocket.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDEC4) = 0
close(3) = 0
open("/usr/local/lib/libc.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/libc.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDEC4) = 0
close(3) = 0
mprotect(0xFEFE0000, 19176, PROT_READ|PROT_WRITE|PROT_EXEC) = 0
mprotect(0xFEFE0000, 19176, PROT_READ|PROT_EXEC) = 0
munmap(0xFF0C0000, 8192) = 0
getpid() = 1087 [1086]
getpid() = 1087 [1086]
getpid() = 1087 [1086]
lstat64("/tmp/.winbindd", 0xFFBFCB30) = 0
lstat64("/tmp/.winbindd/pipe", 0xFFBFCB30) = 0
so_socket(PF_UNIX, SOCK_STREAM, 0, "", 1) = 3
fcntl(3, F_GETFD, 0x00000000) = 0
fcntl(3, F_SETFD, 0x00000001) = 0
connect(3, 0xFFBFCBC8, 110, 1) = 0
getpid() = 1087 [1086]
getpid() = 1087 [1086]
poll(0xFFBFC420, 1, 0) = 0
write(3, "\0\006 \0\0\0\0\0\004 ?".., 1568) = 1568
read(3, "\0\00514\0\0\001\0\0\0\b".., 1300) = 1300
getpid() = 1087 [1086]
getpid() = 1087 [1086]
poll(0xFFBFC420, 1, 0) = 0
write(3, "\0\006 \0\0\0 (\0\004 ?".., 1568) = 1568
read(3, "\0\005 C\0\0\001\0\0\0\0".., 1300) = 1300
read(3, " / u s r / l o c a l / s".., 47) = 47
lstat64("/usr/local/samba/var/locks/winbindd_privileged", 0xFFBFCB30)
= 0
lstat64("/usr/local/samba/var/locks/winbindd_privileged/pipe",
0xFFBFCB30) = 0
so_socket(PF_UNIX, SOCK_STREAM, 0, "", 1) = 4
fcntl(4, F_GETFD, 0x00000000) = 0
fcntl(4, F_SETFD, 0x00000001) = 0
connect(4, 0xFFBFCBC8, 110, 1) = 0
close(3) = 0
poll(0xFFBFD7B8, 1, 0) = 0
write(4, "\0\006 \0\0\001\0\004 ?".., 1568) = 1568
read(4, "\0\00514\0\0\001 g a n g".., 1300) = 1300
getuid() = 0 [0]
getuid() = 0 [0]
fstat(-1, 0xFFBFDFA8) Err#9 EBADF
open("/dev/conslog", O_WRONLY) = 3
fcntl(3, F_SETFD, 0x00000001) = 0
fstat(3, 0xFFBFDFA8) = 0
fstat(3, 0xFFBFEA08) = 0
time() = 1075370916
open("/usr/share/lib/zoneinfo/GB", O_RDONLY) = 5
fstat64(5, 0xFFBFDDE8) = 0
read(5, " T Z i f\0\0\0\0\0\0\0\0".., 1323) = 1323
close(5) = 0
putmsg(3, 0xFFBFE0C0, 0xFFBFE0B4, 0) = 0
open("/var/run/syslog_door", O_RDONLY) = 5
door_info(5, 0xFFBFDFF8) = 0
getpid() = 1087 [1086]
door_call(5, 0xFFBFDFE0) = 0
close(5) = 0
fstat(3, 0xFFBFEBD8) = 0
close(3) = 0
sigaction(SIGQUIT, 0xFFBFEBA0, 0xFFBFEC20) = 0
sigaction(SIGINT, 0xFFBFEBA0, 0xFFBFEC20) = 0
open64("/var/run/name_service_door", O_RDONLY) Err#2 ENOENT
open("/etc/passwd", O_RDONLY) = 3
fstat64(3, 0xFFBFE2F8) = 0
fstat64(3, 0xFFBFE1A0) = 0
ioctl(3, TCGETA, 0xFFBFE284) Err#25 ENOTTY
read(3, " r o o t : x : 0 : 1 : S".., 8192) = 1120
read(3, 0x00029B8C, 8192) = 0
llseek(3, 0, SEEK_CUR) = 1120
close(3) = 0
getpid() = 1087 [1086]
getpid() = 1087 [1086]
poll(0xFFBFD6B0, 1, 0) = 0
write(4, "\0\006 \0\0\001\0\004 ?".., 1568) = 1568
read(4, "\0\00514\0\0\001 g a n g".., 1300) = 1300
open64("/var/run/name_service_door", O_RDONLY) Err#2 ENOENT
open("/usr/local/lib/nss_files.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/nss_files.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDA64) = 0
close(3) = 0
open("/etc/user_attr", O_RDONLY) = 3
fstat64(3, 0xFFBFE010) = 0
fstat64(3, 0xFFBFDEB8) = 0
ioctl(3, TCGETA, 0xFFBFDF9C) Err#25 ENOTTY
read(3, " # C o p y r i g h t ".., 8192) = 297
read(3, 0x00029B8C, 8192) = 0
llseek(3, 0, SEEK_CUR) = 297
close(3) = 0
open("/usr/local/lib/nss_winbind.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/nss_winbind.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFDA64) = 0
close(3) = 0
open("/usr/local/lib/nss_files.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/nss_files.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFE37C) = 0
close(3) = 0
open("/etc/project", O_RDONLY) = 3
fstat64(3, 0xFFBFE7F8) = 0
brk(0x0002BE70) = 0
brk(0x0002DE70) = 0
fstat64(3, 0xFFBFE6A0) = 0
ioctl(3, TCGETA, 0xFFBFE784) Err#25 ENOTTY
read(3, " s y s t e m : 0 : : : :".., 8192) = 78
read(3, 0x0002AB94, 8192) = 0
llseek(3, 0, SEEK_CUR) = 78
close(3) = 0
open64("/var/run/name_service_door", O_RDONLY) Err#2 ENOENT
open("/usr/local/lib/nss_files.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/nss_files.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFC27C) = 0
close(3) = 0
open("/etc/group", O_RDONLY) = 3
fstat64(3, 0xFFBFC6F8) = 0
fstat64(3, 0xFFBFC5A0) = 0
ioctl(3, TCGETA, 0xFFBFC684) Err#25 ENOTTY
read(3, " r o o t : : 0 : r o o t".., 8192) = 1108
read(3, 0x0002ABF4, 8192) = 0
llseek(3, 0, SEEK_CUR) = 1108
close(3) = 0
open("/usr/local/lib/nss_winbind.so.1", O_RDONLY) Err#2 ENOENT
open("/usr/lib/nss_winbind.so.1", O_RDONLY) = 3
fstat(3, 0xFFBFC27C) = 0
close(3) = 0
getpid() = 1087 [1086]
getpid() = 1087 [1086]
poll(0xFFBFBAB0, 1, 0) = 0
write(4, "\0\006 \0\0\004\0\004 ?".., 1568) = 1568
read(4, 0xFEFF656C, 1300) (sleeping...)
read(4, "\0\012F9\0\0\001 D o m a".., 1300) = 1300
read(4, " h e l i o d o r , a d m".., 3557) = 3557
alarm(0) = 0
sigaction(SIGALRM, 0xFFBFC8F0, 0xFFBFC9A0) = 0
sigprocmask(SIG_BLOCK, 0xFFBFC990, 0xFFBFC980) = 0
alarm(1) = 0
Received signal #14, SIGALRM, in sigsuspend() [caught]
sigsuspend(0xFFBFC970) Err#4 EINTR
setcontext(0xFFBFC658)
alarm(0) = 0
sigprocmask(SIG_UNBLOCK, 0xFFBFC990, 0x00000000) = 0
sigaction(SIGALRM, 0xFFBFC8F0, 0x00000000) = 0
alarm(0) = 0
sigaction(SIGALRM, 0xFFBFC8F0, 0xFFBFC9A0) = 0
sigprocmask(SIG_BLOCK, 0xFFBFC990, 0xFFBFC980) = 0
alarm(2) = 0
sigsuspend(0xFFBFC970) (sleeping...)
Received signal #14, SIGALRM, in sigsuspend() [caught]
sigsuspend(0xFFBFC970) Err#4 EINTR
setcontext(0xFFBFC658)
alarm(0) = 0
sigprocmask(SIG_UNBLOCK, 0xFFBFC990, 0x00000000) = 0
sigaction(SIGALRM, 0xFFBFC8F0, 0x00000000) = 0
alarm(0) = 0
sigaction(SIGALRM, 0xFFBFC8F0, 0xFFBFC9A0) = 0
sigprocmask(SIG_BLOCK, 0xFFBFC990, 0xFFBFC980) = 0
alarm(4) = 0
sigsuspend(0xFFBFC970) (sleeping...)
Received signal #14, SIGALRM, in sigsuspend() [caught]
sigsuspend(0xFFBFC970) Err#4 EINTR
setcontext(0xFFBFC658)
alarm(0) = 0
sigprocmask(SIG_UNBLOCK, 0xFFBFC990, 0x00000000) = 0
sigaction(SIGALRM, 0xFFBFC8F0, 0x00000000) = 0
alarm(0) = 0
sigaction(SIGALRM, 0xFFBFC8F0, 0xFFBFC9A0) = 0
sigprocmask(SIG_BLOCK, 0xFFBFC990, 0xFFBFC980) = 0
alarm(5) = 0
sigsuspend(0xFFBFC970) (sleeping...)
Received signal #2, SIGINT, in sigsuspend() [default]
sigsuspend(0xFFBFC970) Err#4 EINTR
Did you use the pam.conf file I sent you ? I will attached again. Do you have patch 113476-08 or later installed ? /Patrik On Thu, 2004-01-29 at 11:26, Ganguly, Sapan wrote:> I've gone back to 3.0.1 to try and get winbind to work with my Solaris 9 > machine and NT4 domain. Everything works except user authentication. The > wbinfo and getent commands do what they are supposed to. > > I've included a truss of 'su - ganguly' > > According to pamlog, the user 'ganguly' has been granted access but it is > still hanging. > > How do I do a truss of a telnet login? > > I'm hoping some one out there is good with Solaris. > > Can you help? > > Thanks, > Sapan > > > ______________________________________________________________________ > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba-- "In a world without fences who needs Gates" Patrik Gustavsson, Senior Technical Consultant patrik.gustavsson@sun.com Telephone: +46 60 671540 http://glen.sweden Mobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -------------------------------------------------------------- -------------- next part -------------- # #ident "@(#)pam.conf 1.20 02/01/23 SMI" # # Copyright 1996-2002 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # PAM configuration # # Unless explicitly defined, all services use the modules # defined in the "other" section. # # Modules are defined with relative pathnames, i.e., they are # relative to /usr/lib/security/$ISA. Absolute path names, as # present in this file in previous releases are still acceptable. # # Authentication management # # login service (explicit because of pam_dial_auth) # login auth requisite pam_authtok_get.so.1 login auth sufficient pam_winbind.so.1 try_first_pass login auth sufficient pam_dhkeys.so.1 login auth sufficient pam_unix_auth.so.1 login auth sufficient pam_dial_auth.so.1 # # rlogin service (explicit because of pam_rhost_auth) # rlogin auth sufficient pam_rhosts_auth.so.1 rlogin auth requisite pam_authtok_get.so.1 rlogin auth sufficient pam_dhkeys.so.1 rlogin auth sufficient pam_unix_auth.so.1 rlogin auth sufficient pam_winbind.so.1 try_first_pass # # rsh service (explicit because of pam_rhost_auth, # and pam_unix_auth for meaningful pam_setcred) # rsh auth sufficient pam_rhosts_auth.so.1 rsh auth required pam_unix_auth.so.1 # # PPP service (explicit because of pam_dial_auth) # ppp auth requisite pam_authtok_get.so.1 ppp auth required pam_dhkeys.so.1 ppp auth required pam_unix_auth.so.1 ppp auth required pam_dial_auth.so.1 # # Default definitions for Authentication management # Used when service name is not explicitly mentioned for authenctication # other auth requisite pam_authtok_get.so.1 other auth sufficient pam_dhkeys.so.1 other auth sufficient pam_unix_auth.so.1 other auth sufficient pam_winbind.so.1 try_first_pass # # passwd command (explicit because of a different authentication module) # passwd auth required pam_passwd_auth.so.1 # # cron service (explicit because of non-usage of pam_roles.so.1) # cron account required pam_projects.so.1 cron account required pam_unix_account.so.1 # # Default definition for Account management # Used when service name is not explicitly mentioned for account management # other account requisite pam_roles.so.1 other account required pam_projects.so.1 other account sufficient pam_unix_account.so.1 other account sufficient pam_winbind.so.1 try_first_pass # # Default definition for Session management # Used when service name is not explicitly mentioned for session management # other session required pam_unix_session.so.1 # # Default definition for Password management # Used when service name is not explicitly mentioned for password management # other password required pam_dhkeys.so.1 other password requisite pam_authtok_get.so.1 other password requisite pam_authtok_check.so.1 other password required pam_authtok_store.so.1 # # Support for Kerberos V5 authentication (uncomment to use Kerberos) # #rlogin auth optional pam_krb5.so.1 try_first_pass #login auth optional pam_krb5.so.1 try_first_pass #other auth optional pam_krb5.so.1 try_first_pass #cron account optional pam_krb5.so.1 #other account optional pam_krb5.so.1 #other session optional pam_krb5.so.1 #other password optional pam_krb5.so.1 try_first_pass
Hello Patrik, Yes, I used your pam.conf and I have the patch installed. I can't think what else the problem could be. I can't see what happens after I type in my password. Pamlog looks like this - Jan 29 11:28:27 sun001 login: [ID 634615 auth.debug] pam_authtok_get:pam_sm_authenticate: flags = 0 Jan 29 11:28:31 sun001 login: [ID 378613 auth.debug] pam_dhkeys: user ganguly not found Jan 29 11:28:31 sun001 login: [ID 896952 auth.debug] pam_unix_auth: entering pam_sm_authenticate() Jan 29 11:28:31 sun001 login: [ID 219349 auth.debug] pam_unix_auth: user ganguly not found Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 572310 auth.info] Verify user `ganguly' Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 614614 auth.notice] user 'ganguly' granted acces Jan 29 11:28:31 sun001 login[1138]: [ID 509786 auth.debug] roles pam_sm_authenticate, service = teln et user = ganguly ruser = not set rhost = pc8723_w2k.uk.trt.thales It tells me that the user is granted access but then nothing happens, I don't get a shell even though I have an entry in smb.conf 'template shell /bin/bash' Strange huh? -----Original Message----- From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] Sent: 29 January 2004 11:13 To: Ganguly, Sapan Cc: 'Samba'; 'richard.huber@sun.com'; 'Patrik.Gustavsson@Sun.COM' Subject: Re: [Samba] Back to 3.0.1, Winbind and Solaris 9 Did you use the pam.conf file I sent you ? I will attached again. Do you have patch 113476-08 or later installed ? /Patrik On Thu, 2004-01-29 at 11:26, Ganguly, Sapan wrote:> I've gone back to 3.0.1 to try and get winbind to work with my Solaris > 9 machine and NT4 domain. Everything works except user > authentication. The wbinfo and getent commands do what they are > supposed to. > > I've included a truss of 'su - ganguly' > > According to pamlog, the user 'ganguly' has been granted access but it > is still hanging. > > How do I do a truss of a telnet login? > > I'm hoping some one out there is good with Solaris. > > Can you help? > > Thanks, > Sapan > > > ______________________________________________________________________ > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba-- "In a world without fences who needs Gates" Patrik Gustavsson, Senior Technical Consultant patrik.gustavsson@sun.com Telephone: +46 60 671540 http://glen.sweden Mobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 --------------------------------------------------------------
Ah, I compiled with gcc 3.3.2. My machine is an Enterprise 220R so I guess I would have compiled in 64 bit by default right? How do I force it to compile everything in 32 bit? I think I installed the OS to be compatible with 32 bit apps. I have the same symbolic links as you but what is /usr/lib/security/sparcv9 for? What is the difference between /usr/lib/security and /lib/security? -----Original Message----- From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] Sent: 29 January 2004 12:46 To: Ganguly, Sapan Cc: 'Patrik Gustavsson'; 'Samba'; 'richard.huber@sun.com' Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 Ok, Lets take a step back, I have used the pam.conf file on both 3.0.1 and 3.0.2rc1 and it works. The libraries is 32 bits and is installed in /usr/lib/security and has been compiled with gcc 3.2.3. The only thing I have changed is that Samba is compiling pam_winbind.so instead of pam_winbind.so.1, so I renamed pam_winbind.so to pam_winbind.so.1 in /usr/lib/security and created a symlink from pam_winbind.so to pam_winbind.so.1 lrwxrwxrwx 1 root other 16 Jan 26 14:13 pam_winbind.so -> pam_winbind.so.1 -rwxr-xr-x 1 root other 27904 Jan 28 15:25 pam_winbind.so.1 /Patrik On Thu, 2004-01-29 at 12:29, Ganguly, Sapan wrote:> Hello Patrik, > > Yes, I used your pam.conf and I have the patch installed. I can't > think what else the problem could be. > > I can't see what happens after I type in my password. Pamlog looks > like this - > > Jan 29 11:28:27 sun001 login: [ID 634615 auth.debug] > pam_authtok_get:pam_sm_authenticate: flags = 0 > Jan 29 11:28:31 sun001 login: [ID 378613 auth.debug] pam_dhkeys: user > ganguly not found Jan 29 11:28:31 sun001 login: [ID 896952 auth.debug] > pam_unix_auth: entering > pam_sm_authenticate() > Jan 29 11:28:31 sun001 login: [ID 219349 auth.debug] pam_unix_auth: > user ganguly not found Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID > 572310 auth.info] Verify user `ganguly' > Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 614614 auth.notice] user > 'ganguly' granted acces > Jan 29 11:28:31 sun001 login[1138]: [ID 509786 auth.debug] roles > pam_sm_authenticate, service = teln > et user = ganguly ruser = not set rhost = pc8723_w2k.uk.trt.thales > > It tells me that the user is granted access but then nothing happens, > I don't get a shell even though I have an entry in smb.conf 'template > shell = /bin/bash' > > Strange huh? > > -----Original Message----- > From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] > Sent: 29 January 2004 11:13 > To: Ganguly, Sapan > Cc: 'Samba'; 'richard.huber@sun.com'; 'Patrik.Gustavsson@Sun.COM' > Subject: Re: [Samba] Back to 3.0.1, Winbind and Solaris 9 > > > Did you use the pam.conf file I sent you ? > > I will attached again. > > Do you have patch 113476-08 or later installed ? > > > /Patrik > On Thu, 2004-01-29 at 11:26, Ganguly, Sapan wrote: > > I've gone back to 3.0.1 to try and get winbind to work with my > > Solaris > > 9 machine and NT4 domain. Everything works except user > > authentication. The wbinfo and getent commands do what they are > > supposed to. > > > > I've included a truss of 'su - ganguly' > > > > According to pamlog, the user 'ganguly' has been granted access but > > it > > is still hanging. > > > > How do I do a truss of a telnet login? > > > > I'm hoping some one out there is good with Solaris. > > > > Can you help? > > > > Thanks, > > Sapan > > > > > > ____________________________________________________________________ > > __ > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba-- "In a world without fences who needs Gates" Patrik Gustavsson, Senior Technical Consultant patrik.gustavsson@sun.com Telephone: +46 60 671540 http://glen.sweden Mobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 --------------------------------------------------------------
OK, I've checked that, my libraries are 32 bit. I've just had a look at my config.log, here are just a few of the errors in it, I did a search on google but the general opinion seems to be that they don't matter?! Is that true? In file included from configure:5267: /usr/include/net/if.h:231: error: field `ifa_addr' has incomplete type /usr/include/net/if.h:233: error: field `ifu_broadaddr' has incomplete type /usr/include/net/if.h:234: error: field `ifu_dstaddr' has incomplete type /usr/include/net/if.h:266: error: field `lnr_addr' has incomplete type /usr/include/net/if.h:335: error: field `lifru_addr' has incomplete type /usr/include/net/if.h:336: error: field `lifru_dstaddr' has incomplete type /usr/include/net/if.h:337: error: field `lifru_broadaddr' has incomplete type /usr/include/net/if.h:338: error: field `lifru_token' has incomplete type /usr/include/net/if.h:339: error: field `lifru_subnet' has incomplete type /usr/include/net/if.h:378: error: field `sa_addr' has incomplete type /usr/include/net/if.h:388: error: field `slr_src' has incomplete type /usr/include/net/if.h:389: error: field `slr_grp' has incomplete type /usr/include/net/if.h:408: error: field `ifru_addr' has incomplete type /usr/include/net/if.h:409: error: field `ifru_dstaddr' has incomplete type /usr/include/net/if.h:411: error: field `ifru_broadaddr' has incomplete type /usr/include/net/if.h:479: error: parse error before "sa_family_t" /usr/include/net/if.h:482: error: parse error before '}' token /usr/include/net/if.h:492: error: parse error before "sa_family_t" /usr/include/net/if.h:501: error: parse error before '}' token /usr/include/net/if.h:632: error: field `ifta_saddr' has incomplete type /usr/include/net/if.h:633: error: field `ifta_daddr' has incomplete type configure:5303: WARNING: net/if.h: present but cannot be compiled configure:5305: WARNING: net/if.h: check for missing prerequisite headers? configure:5307: WARNING: net/if.h: proceeding with the preprocessor's result configure:5310: checking for net/if.h #include <sys/priv.h> configure:5615: result: no configure:5619: checking sys/priv.h presence configure:5626: gcc -E -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c configure:5622:22: sys/priv.h: No such file or directory configure:5632: $? = 1 configure: failed program was: #line 5621 "configure" configure:5942: checking security/pam_modules.h usability configure:5951: gcc -c -O -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c >&5 In file included from configure:5979: /usr/include/security/pam_modules.h:17: error: parse error before '*' token /usr/include/security/pam_modules.h:24: error: parse error before '*' token /usr/include/security/pam_modules.h:31: error: parse error before '*' token /usr/include/security/pam_modules.h:38: error: parse error before '*' token /usr/include/security/pam_modules.h:45: error: parse error before '*' token /usr/include/security/pam_modules.h:59: error: parse error before '*' token /usr/include/security/pam_modules.h:71: error: parse error before '*' token /usr/include/security/pam_modules.h:74: error: parse error before '*' token /usr/include/security/pam_modules.h:83: error: parse error before '*' token configure:5954: $? = 1 configure: failed program was: #line 5944 "configure" #include <security/pam_modules.h> configure:5969: result: no configure:5973: checking security/pam_modules.h presence configure:5980: gcc -E -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c configure:5986: $? = 0 configure:6004: result: yes configure:6015: WARNING: security/pam_modules.h: present but cannot be compiled configure:6017: WARNING: security/pam_modules.h: check for missing prerequisite headers? configure:6019: WARNING: security/pam_modules.h: proceeding with the preprocessor's result configure:6022: checking for security/pam_modules.h configure:6029: result: yes configure:5942: checking security/_pam_macros.h usability configure:5951: gcc -c -O -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c >&5 configure:5979:34: security/_pam_macros.h: No such file or directory configure:5954: $? = 1 configure: failed program was: #line 5944 "configure" -----Original Message----- From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] Sent: 29 January 2004 14:07 To: Ganguly, Sapan Cc: 'Samba'; 'richard.huber@sun.com' Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 /lib is symlink to /usr/lib The 32 bits pam libs are installed in /usr/lib/security and 64 bits are installed in /usr/lib/security/sparcv9 If you want to know if your libs are 32 or 64 bits, run file command, # file /usr/lib/security/pam_winbind.so.1 /usr/lib/security/pam_winbind.so.1: ELF 32-bit MSB dynamic lib SPARC Version 1, dynamically linked, not stripped # file /usr/lib/security/sparcv9/pam_unix.so.1 /usr/lib/security/sparcv9/pam_unix.so.1: ELF 64-bit MSB dynamic lib SPARCV9 Version 1, dynamically linked, not stripped I think the compiler is compiling 32 bits by default. /Patrik On Thu, 2004-01-29 at 14:31, Ganguly, Sapan wrote:> Ah, I compiled with gcc 3.3.2. My machine is an Enterprise 220R so I > guess I would have compiled in 64 bit by default right? How do I > force it to compile everything in 32 bit? I think I installed the OS > to be compatible with 32 bit apps. > > I have the same symbolic links as you but what is > /usr/lib/security/sparcv9 for? > > What is the difference between /usr/lib/security and /lib/security? > > > > -----Original Message----- > From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] > Sent: 29 January 2004 12:46 > To: Ganguly, Sapan > Cc: 'Patrik Gustavsson'; 'Samba'; 'richard.huber@sun.com' > Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 > > > Ok, > > Lets take a step back, > > I have used the pam.conf file on both 3.0.1 and 3.0.2rc1 and it works. > > The libraries is 32 bits and is installed in /usr/lib/security and has > been compiled with gcc 3.2.3. > > The only thing I have changed is that Samba is compiling > pam_winbind.so instead of pam_winbind.so.1, so I renamed > pam_winbind.so to pam_winbind.so.1 in /usr/lib/security and created a > symlink from pam_winbind.so to pam_winbind.so.1 > > lrwxrwxrwx 1 root other 16 Jan 26 14:13 pam_winbind.so -> > pam_winbind.so.1 > -rwxr-xr-x 1 root other 27904 Jan 28 15:25 pam_winbind.so.1 > > /Patrik > On Thu, 2004-01-29 at 12:29, Ganguly, Sapan wrote: > > Hello Patrik, > > > > Yes, I used your pam.conf and I have the patch installed. I can't > > think what else the problem could be. > > > > I can't see what happens after I type in my password. Pamlog looks > > like this - > > > > Jan 29 11:28:27 sun001 login: [ID 634615 auth.debug] > > pam_authtok_get:pam_sm_authenticate: flags = 0 > > Jan 29 11:28:31 sun001 login: [ID 378613 auth.debug] pam_dhkeys: > > user > > ganguly not found Jan 29 11:28:31 sun001 login: [ID 896952 auth.debug] > > pam_unix_auth: entering > > pam_sm_authenticate() > > Jan 29 11:28:31 sun001 login: [ID 219349 auth.debug] pam_unix_auth: > > user ganguly not found Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID > > 572310 auth.info] Verify user `ganguly' > > Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 614614 auth.notice] user > > 'ganguly' granted acces > > Jan 29 11:28:31 sun001 login[1138]: [ID 509786 auth.debug] roles > > pam_sm_authenticate, service = teln > > et user = ganguly ruser = not set rhost = pc8723_w2k.uk.trt.thales > > > > It tells me that the user is granted access but then nothing > > happens, > > I don't get a shell even though I have an entry in smb.conf 'template > > shell = /bin/bash' > > > > Strange huh? > > > > -----Original Message----- > > From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] > > Sent: 29 January 2004 11:13 > > To: Ganguly, Sapan > > Cc: 'Samba'; 'richard.huber@sun.com'; 'Patrik.Gustavsson@Sun.COM' > > Subject: Re: [Samba] Back to 3.0.1, Winbind and Solaris 9 > > > > > > Did you use the pam.conf file I sent you ? > > > > I will attached again. > > > > Do you have patch 113476-08 or later installed ? > > > > > > /Patrik > > On Thu, 2004-01-29 at 11:26, Ganguly, Sapan wrote: > > > I've gone back to 3.0.1 to try and get winbind to work with my > > > Solaris > > > 9 machine and NT4 domain. Everything works except user > > > authentication. The wbinfo and getent commands do what they are > > > supposed to. > > > > > > I've included a truss of 'su - ganguly' > > > > > > According to pamlog, the user 'ganguly' has been granted access > > > but > > > it > > > is still hanging. > > > > > > How do I do a truss of a telnet login? > > > > > > I'm hoping some one out there is good with Solaris. > > > > > > Can you help? > > > > > > Thanks, > > > Sapan > > > > > > > > > __________________________________________________________________ > > > __ > > > __ > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: http://lists.samba.org/mailman/listinfo/samba > -- > "In a world without fences who needs Gates" > Patrik Gustavsson, Senior Technical Consultant > patrik.gustavsson@sun.com Telephone: +46 60 671540 > http://glen.sweden Mobile: +46 70 3551040 > SUN MICROSYSTEMS Fax: +46 60 671550 > ---------------------------------------------------------------- "In a world without fences who needs Gates" Patrik Gustavsson, Senior Technical Consultant patrik.gustavsson@sun.com Telephone: +46 60 671540 http://glen.sweden Mobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 --------------------------------------------------------------
The size of my libnss_winbind.so is 29k and my pam_winbind.so is 27k. Are yours this size? I seem to remember that from a previous compile that libnss_winbind.so was about 737k. -----Original Message----- From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] Sent: 29 January 2004 14:07 To: Ganguly, Sapan Cc: 'Samba'; 'richard.huber@sun.com' Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 /lib is symlink to /usr/lib The 32 bits pam libs are installed in /usr/lib/security and 64 bits are installed in /usr/lib/security/sparcv9 If you want to know if your libs are 32 or 64 bits, run file command, # file /usr/lib/security/pam_winbind.so.1 /usr/lib/security/pam_winbind.so.1: ELF 32-bit MSB dynamic lib SPARC Version 1, dynamically linked, not stripped # file /usr/lib/security/sparcv9/pam_unix.so.1 /usr/lib/security/sparcv9/pam_unix.so.1: ELF 64-bit MSB dynamic lib SPARCV9 Version 1, dynamically linked, not stripped I think the compiler is compiling 32 bits by default. /Patrik On Thu, 2004-01-29 at 14:31, Ganguly, Sapan wrote:> Ah, I compiled with gcc 3.3.2. My machine is an Enterprise 220R so I > guess I would have compiled in 64 bit by default right? How do I > force it to compile everything in 32 bit? I think I installed the OS > to be compatible with 32 bit apps. > > I have the same symbolic links as you but what is > /usr/lib/security/sparcv9 for? > > What is the difference between /usr/lib/security and /lib/security? > > > > -----Original Message----- > From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] > Sent: 29 January 2004 12:46 > To: Ganguly, Sapan > Cc: 'Patrik Gustavsson'; 'Samba'; 'richard.huber@sun.com' > Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 > > > Ok, > > Lets take a step back, > > I have used the pam.conf file on both 3.0.1 and 3.0.2rc1 and it works. > > The libraries is 32 bits and is installed in /usr/lib/security and has > been compiled with gcc 3.2.3. > > The only thing I have changed is that Samba is compiling > pam_winbind.so instead of pam_winbind.so.1, so I renamed > pam_winbind.so to pam_winbind.so.1 in /usr/lib/security and created a > symlink from pam_winbind.so to pam_winbind.so.1 > > lrwxrwxrwx 1 root other 16 Jan 26 14:13 pam_winbind.so -> > pam_winbind.so.1 > -rwxr-xr-x 1 root other 27904 Jan 28 15:25 pam_winbind.so.1 > > /Patrik > On Thu, 2004-01-29 at 12:29, Ganguly, Sapan wrote: > > Hello Patrik, > > > > Yes, I used your pam.conf and I have the patch installed. I can't > > think what else the problem could be. > > > > I can't see what happens after I type in my password. Pamlog looks > > like this - > > > > Jan 29 11:28:27 sun001 login: [ID 634615 auth.debug] > > pam_authtok_get:pam_sm_authenticate: flags = 0 > > Jan 29 11:28:31 sun001 login: [ID 378613 auth.debug] pam_dhkeys: > > user > > ganguly not found Jan 29 11:28:31 sun001 login: [ID 896952 auth.debug] > > pam_unix_auth: entering > > pam_sm_authenticate() > > Jan 29 11:28:31 sun001 login: [ID 219349 auth.debug] pam_unix_auth: > > user ganguly not found Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID > > 572310 auth.info] Verify user `ganguly' > > Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 614614 auth.notice] user > > 'ganguly' granted acces > > Jan 29 11:28:31 sun001 login[1138]: [ID 509786 auth.debug] roles > > pam_sm_authenticate, service = teln > > et user = ganguly ruser = not set rhost = pc8723_w2k.uk.trt.thales > > > > It tells me that the user is granted access but then nothing > > happens, > > I don't get a shell even though I have an entry in smb.conf 'template > > shell = /bin/bash' > > > > Strange huh? > > > > -----Original Message----- > > From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM] > > Sent: 29 January 2004 11:13 > > To: Ganguly, Sapan > > Cc: 'Samba'; 'richard.huber@sun.com'; 'Patrik.Gustavsson@Sun.COM' > > Subject: Re: [Samba] Back to 3.0.1, Winbind and Solaris 9 > > > > > > Did you use the pam.conf file I sent you ? > > > > I will attached again. > > > > Do you have patch 113476-08 or later installed ? > > > > > > /Patrik > > On Thu, 2004-01-29 at 11:26, Ganguly, Sapan wrote: > > > I've gone back to 3.0.1 to try and get winbind to work with my > > > Solaris > > > 9 machine and NT4 domain. Everything works except user > > > authentication. The wbinfo and getent commands do what they are > > > supposed to. > > > > > > I've included a truss of 'su - ganguly' > > > > > > According to pamlog, the user 'ganguly' has been granted access > > > but > > > it > > > is still hanging. > > > > > > How do I do a truss of a telnet login? > > > > > > I'm hoping some one out there is good with Solaris. > > > > > > Can you help? > > > > > > Thanks, > > > Sapan > > > > > > > > > __________________________________________________________________ > > > __ > > > __ > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: http://lists.samba.org/mailman/listinfo/samba > -- > "In a world without fences who needs Gates" > Patrik Gustavsson, Senior Technical Consultant > patrik.gustavsson@sun.com Telephone: +46 60 671540 > http://glen.sweden Mobile: +46 70 3551040 > SUN MICROSYSTEMS Fax: +46 60 671550 > ---------------------------------------------------------------- "In a world without fences who needs Gates" Patrik Gustavsson, Senior Technical Consultant patrik.gustavsson@sun.com Telephone: +46 60 671540 http://glen.sweden Mobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 --------------------------------------------------------------
BTW to truss telnetd:
On the telnet server host:
1) Find a free TCP port for this on the telnet server, e.g. port 23023
# netstat -an | grep 23023
2) Add a service for the port in /etc/services (e.g. at the very end of the
file)
ttelnet 23023/tcp
3) Add an entry in /etc/inetd.conf for this service by adding the following
line to the file
(e.g. close to the original telnet definition)
ttelnet stream tcp nowait root /usr/bin/truss truss
-fo/var/tmp/truss.telnetd /usr/sbin/in.telnetd
Note; be careful to write truss options and output filename as one single
argument as above. Extra spaces may create problems (due to limitation in
inetd).
4) Tell "inetd" about the change
# ps -ef | grep inetd
root 179 1 0 Oct 22 ? 0:01 /usr/sbin/inetd -s
# kill -1 179
On the telnet client host:
5) Try connecting to the new service from the problematic telnet client
# /usr/bin/telnet <host> 23023
Resulting truss output file is /var/tmp/truss.telnetd on the telnet server.
-----Original Message-----
From: samba-bounces+unix.services=ants.co.uk@lists.samba.org
[mailto:samba-bounces+unix.services=ants.co.uk@lists.samba.org] On Behalf Of
Ganguly, Sapan
Sent: 29 January 2004 17:15
To: 'Patrik Gustavsson'; Ganguly, Sapan
Cc: 'Samba'; 'richard.huber@sun.com'
Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9
The size of my libnss_winbind.so is 29k and my pam_winbind.so is 27k. Are
yours this size?
I seem to remember that from a previous compile that libnss_winbind.so was
about 737k.
-----Original Message-----
From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM]
Sent: 29 January 2004 14:07
To: Ganguly, Sapan
Cc: 'Samba'; 'richard.huber@sun.com'
Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9
/lib is symlink to /usr/lib
The 32 bits pam libs are installed in /usr/lib/security and 64 bits are
installed in /usr/lib/security/sparcv9
If you want to know if your libs are 32 or 64 bits, run file command,
# file /usr/lib/security/pam_winbind.so.1
/usr/lib/security/pam_winbind.so.1: ELF 32-bit MSB dynamic lib SPARC
Version 1, dynamically linked, not stripped
# file /usr/lib/security/sparcv9/pam_unix.so.1
/usr/lib/security/sparcv9/pam_unix.so.1: ELF 64-bit MSB dynamic
lib SPARCV9 Version 1, dynamically linked, not stripped
I think the compiler is compiling 32 bits by default.
/Patrik
On Thu, 2004-01-29 at 14:31, Ganguly, Sapan wrote:> Ah, I compiled with gcc 3.3.2. My machine is an Enterprise 220R so I
> guess I would have compiled in 64 bit by default right? How do I
> force it to compile everything in 32 bit? I think I installed the OS
> to be compatible with 32 bit apps.
>
> I have the same symbolic links as you but what is
> /usr/lib/security/sparcv9 for?
>
> What is the difference between /usr/lib/security and /lib/security?
>
>
>
> -----Original Message-----
> From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM]
> Sent: 29 January 2004 12:46
> To: Ganguly, Sapan
> Cc: 'Patrik Gustavsson'; 'Samba';
'richard.huber@sun.com'
> Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9
>
>
> Ok,
>
> Lets take a step back,
>
> I have used the pam.conf file on both 3.0.1 and 3.0.2rc1 and it works.
>
> The libraries is 32 bits and is installed in /usr/lib/security and has
> been compiled with gcc 3.2.3.
>
> The only thing I have changed is that Samba is compiling
> pam_winbind.so instead of pam_winbind.so.1, so I renamed
> pam_winbind.so to pam_winbind.so.1 in /usr/lib/security and created a
> symlink from pam_winbind.so to pam_winbind.so.1
>
> lrwxrwxrwx 1 root other 16 Jan 26 14:13 pam_winbind.so ->
> pam_winbind.so.1
> -rwxr-xr-x 1 root other 27904 Jan 28 15:25 pam_winbind.so.1
>
> /Patrik
> On Thu, 2004-01-29 at 12:29, Ganguly, Sapan wrote:
> > Hello Patrik,
> >
> > Yes, I used your pam.conf and I have the patch installed. I can't
> > think what else the problem could be.
> >
> > I can't see what happens after I type in my password. Pamlog
looks
> > like this -
> >
> > Jan 29 11:28:27 sun001 login: [ID 634615 auth.debug]
> > pam_authtok_get:pam_sm_authenticate: flags = 0
> > Jan 29 11:28:31 sun001 login: [ID 378613 auth.debug] pam_dhkeys:
> > user
> > ganguly not found Jan 29 11:28:31 sun001 login: [ID 896952 auth.debug]
> > pam_unix_auth: entering
> > pam_sm_authenticate()
> > Jan 29 11:28:31 sun001 login: [ID 219349 auth.debug] pam_unix_auth:
> > user ganguly not found Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID
> > 572310 auth.info] Verify user `ganguly'
> > Jan 29 11:28:31 sun001 pam_winbind[1138]: [ID 614614 auth.notice] user
> > 'ganguly' granted acces
> > Jan 29 11:28:31 sun001 login[1138]: [ID 509786 auth.debug] roles
> > pam_sm_authenticate, service = teln
> > et user = ganguly ruser = not set rhost = pc8723_w2k.uk.trt.thales
> >
> > It tells me that the user is granted access but then nothing
> > happens,
> > I don't get a shell even though I have an entry in smb.conf
'template
> > shell = /bin/bash'
> >
> > Strange huh?
> >
> > -----Original Message-----
> > From: Patrik Gustavsson [mailto:Patrik.Gustavsson@Sun.COM]
> > Sent: 29 January 2004 11:13
> > To: Ganguly, Sapan
> > Cc: 'Samba'; 'richard.huber@sun.com';
'Patrik.Gustavsson@Sun.COM'
> > Subject: Re: [Samba] Back to 3.0.1, Winbind and Solaris 9
> >
> >
> > Did you use the pam.conf file I sent you ?
> >
> > I will attached again.
> >
> > Do you have patch 113476-08 or later installed ?
> >
> >
> > /Patrik
> > On Thu, 2004-01-29 at 11:26, Ganguly, Sapan wrote:
> > > I've gone back to 3.0.1 to try and get winbind to work with
my
> > > Solaris 9 machine and NT4 domain. Everything works except user
> > > authentication. The wbinfo and getent commands do what they are
> > > supposed to.
> > >
> > > I've included a truss of 'su - ganguly'
> > >
> > > According to pamlog, the user 'ganguly' has been granted
access
> > > but
> > > it
> > > is still hanging.
> > >
> > > How do I do a truss of a telnet login?
> > >
> > > I'm hoping some one out there is good with Solaris.
> > >
> > > Can you help?
> > >
> > > Thanks,
> > > Sapan
> > >
> > >
> > >
__________________________________________________________________
> > > __
> > > __
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read
the
> > > instructions: http://lists.samba.org/mailman/listinfo/samba
> --
> "In a world without fences who needs Gates"
> Patrik Gustavsson, Senior Technical Consultant
> patrik.gustavsson@sun.com Telephone: +46 60 671540
> http://glen.sweden Mobile: +46 70 3551040
> SUN MICROSYSTEMS Fax: +46 60 671550
> --------------------------------------------------------------
--
"In a world without fences who needs Gates"
Patrik Gustavsson, Senior Technical Consultant
patrik.gustavsson@sun.com Telephone: +46 60 671540
http://glen.sweden Mobile: +46 70 3551040
SUN MICROSYSTEMS Fax: +46 60 671550
--------------------------------------------------------------
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
***************************************************************************
This communication (including any attachments) contains confidential
information. If you are not the intended recipient and you have received this
communication in error, you should destroy it without copying, disclosing or
otherwise using its contents. Please notify the sender immediately of the
error.
Internet communications are not necessarily secure and may be intercepted or
changed after they are sent. Abbey National Treasury Services plc does not
accept liability for any loss you may suffer as a result of interception or any
liability for such changes. If you wish to confirm the origin or content of
this communication, please contact the sender by using an alternative means of
communication.
This communication does not create or modify any contract and, unless otherwise
stated, is not intended to be contractually binding.
Abbey National Treasury Services plc. Registered Office: Abbey National House,
2 Triton Square, Regents Place, London NW1 3AN. Registered in England under
Company Registration Number: 2338548. Regulated by the Financial Services
Authority (FSA).
***************************************************************************
Hi Sapan, I've also got winbind authentication working with my Solaris 9. Just looked through the truss output from your su command and noticed that your library search path seems to be /usr/local/lib:/usr/lib. Now I can't think that should cause a problem but it is the only difference I can see between my system and yours. Can you try setting the search path as follows and see if that helps, crle -C /var/ld/ld.config -l /usr/lib:/usr/local/lib Also can you confirm you have all of the following files present? /usr/lib/security/pam_winbind.c /usr/lib/security/pam_winbind.h /usr/lib/security/pam_winbind.po /usr/lib/security/pam_winbind.so /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1 /usr/lib/libnss_winbind.so.2 /usr/lib/nss_winbind.so.1 /usr/lib/nss_winbind.so.2 cheers Andy. -----Original Message----- From: samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org [mailto:samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org]On Behalf Of Ganguly, Sapan Posted At: 29 January 2004 10:27 Posted To: Samba Conversation: [Samba] Back to 3.0.1, Winbind and Solaris 9 Subject: [Samba] Back to 3.0.1, Winbind and Solaris 9 I've gone back to 3.0.1 to try and get winbind to work with my Solaris 9 machine and NT4 domain. Everything works except user authentication. The wbinfo and getent commands do what they are supposed to. I've included a truss of 'su - ganguly' According to pamlog, the user 'ganguly' has been granted access but it is still hanging. How do I do a truss of a telnet login? I'm hoping some one out there is good with Solaris. Can you help? Thanks, Sapan BBCi at http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this.
Andy, Hello, thanks for the pointers but it still won't work. I didn't have pam_winbind.c or pam_winbind.h in the location you mention, I've put them there now but still no luck. I ran the crle command, do I have to do anything else to make that change take effect? My libnss_winbind.so is only 29k, is that right? My pam_winbind.so is 27k. Thanks, Sapan -----Original Message----- From: Andrew Smith-MAGAZINES [mailto:andrew.smith.06@bbc.co.uk] Sent: 03 February 2004 18:17 To: Ganguly, Sapan ; samba@lists.samba.org Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 Hi Sapan, I've also got winbind authentication working with my Solaris 9. Just looked through the truss output from your su command and noticed that your library search path seems to be /usr/local/lib:/usr/lib. Now I can't think that should cause a problem but it is the only difference I can see between my system and yours. Can you try setting the search path as follows and see if that helps, crle -C /var/ld/ld.config -l /usr/lib:/usr/local/lib Also can you confirm you have all of the following files present? /usr/lib/security/pam_winbind.c /usr/lib/security/pam_winbind.h /usr/lib/security/pam_winbind.po /usr/lib/security/pam_winbind.so /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1 /usr/lib/libnss_winbind.so.2 /usr/lib/nss_winbind.so.1 /usr/lib/nss_winbind.so.2 cheers Andy. -----Original Message----- From: samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org [mailto:samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org]On Behalf Of Ganguly, Sapan Posted At: 29 January 2004 10:27 Posted To: Samba Conversation: [Samba] Back to 3.0.1, Winbind and Solaris 9 Subject: [Samba] Back to 3.0.1, Winbind and Solaris 9 I've gone back to 3.0.1 to try and get winbind to work with my Solaris 9 machine and NT4 domain. Everything works except user authentication. The wbinfo and getent commands do what they are supposed to. I've included a truss of 'su - ganguly' According to pamlog, the user 'ganguly' has been granted access but it is still hanging. How do I do a truss of a telnet login? I'm hoping some one out there is good with Solaris. Can you help? Thanks, Sapan BBCi at http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this.
my libnss_winbind.so is 30k and pam_winbind.so is 28k. Also I'm using Samba 3.0.2pre1 now. The crle command takes immediate effect. I think someone's provided this already but I've included a working pam.conf (not actually needed for "su"). Also have you added valid template shell and homedir entries to smb.conf? thanks Andy. -----Original Message----- From: Ganguly, Sapan [mailto:Sapan.Ganguly@thalesgroup.com] Sent: 04 February 2004 09:25 To: 'Andrew Smith-MAGAZINES'; 'samba@lists.samba.org' Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 Andy, Hello, thanks for the pointers but it still won't work. I didn't have pam_winbind.c or pam_winbind.h in the location you mention, I've put them there now but still no luck. I ran the crle command, do I have to do anything else to make that change take effect? My libnss_winbind.so is only 29k, is that right? My pam_winbind.so is 27k. Thanks, Sapan -----Original Message----- From: Andrew Smith-MAGAZINES [mailto:andrew.smith.06@bbc.co.uk] Sent: 03 February 2004 18:17 To: Ganguly, Sapan ; samba@lists.samba.org Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 Hi Sapan, I've also got winbind authentication working with my Solaris 9. Just looked through the truss output from your su command and noticed that your library search path seems to be /usr/local/lib:/usr/lib. Now I can't think that should cause a problem but it is the only difference I can see between my system and yours. Can you try setting the search path as follows and see if that helps, crle -C /var/ld/ld.config -l /usr/lib:/usr/local/lib Also can you confirm you have all of the following files present? /usr/lib/security/pam_winbind.c /usr/lib/security/pam_winbind.h /usr/lib/security/pam_winbind.po /usr/lib/security/pam_winbind.so /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1 /usr/lib/libnss_winbind.so.2 /usr/lib/nss_winbind.so.1 /usr/lib/nss_winbind.so.2 cheers Andy. -----Original Message----- From: samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org [mailto:samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org]On Behalf Of Ganguly, Sapan Posted At: 29 January 2004 10:27 Posted To: Samba Conversation: [Samba] Back to 3.0.1, Winbind and Solaris 9 Subject: [Samba] Back to 3.0.1, Winbind and Solaris 9 I've gone back to 3.0.1 to try and get winbind to work with my Solaris 9 machine and NT4 domain. Everything works except user authentication. The wbinfo and getent commands do what they are supposed to. I've included a truss of 'su - ganguly' According to pamlog, the user 'ganguly' has been granted access but it is still hanging. How do I do a truss of a telnet login? I'm hoping some one out there is good with Solaris. Can you help? Thanks, Sapan BBCi at http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this. BBCi at http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this.
Good news!!! When I use YOUR pam.conf it works! The only other thing is that when I do an 'id -a' it does not list all the groups I'm a member of. One more question, where in pam.conf should I put pam_mkhomedir.so so that home directories are created when the user logs in? Thanks! Sapan -----Original Message----- From: ww m-pubsyssamba [mailto:pubsyssamba@bbc.co.uk] Sent: 04 February 2004 10:30 To: Ganguly, Sapan Cc: samba@lists.samba.org Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 my libnss_winbind.so is 30k and pam_winbind.so is 28k. Also I'm using Samba 3.0.2pre1 now. The crle command takes immediate effect. I think someone's provided this already but I've included a working pam.conf (not actually needed for "su"). Also have you added valid template shell and homedir entries to smb.conf? thanks Andy. -----Original Message----- From: Ganguly, Sapan [mailto:Sapan.Ganguly@thalesgroup.com] Sent: 04 February 2004 09:25 To: 'Andrew Smith-MAGAZINES'; 'samba@lists.samba.org' Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 Andy, Hello, thanks for the pointers but it still won't work. I didn't have pam_winbind.c or pam_winbind.h in the location you mention, I've put them there now but still no luck. I ran the crle command, do I have to do anything else to make that change take effect? My libnss_winbind.so is only 29k, is that right? My pam_winbind.so is 27k. Thanks, Sapan -----Original Message----- From: Andrew Smith-MAGAZINES [mailto:andrew.smith.06@bbc.co.uk] Sent: 03 February 2004 18:17 To: Ganguly, Sapan ; samba@lists.samba.org Subject: RE: [Samba] Back to 3.0.1, Winbind and Solaris 9 Hi Sapan, I've also got winbind authentication working with my Solaris 9. Just looked through the truss output from your su command and noticed that your library search path seems to be /usr/local/lib:/usr/lib. Now I can't think that should cause a problem but it is the only difference I can see between my system and yours. Can you try setting the search path as follows and see if that helps, crle -C /var/ld/ld.config -l /usr/lib:/usr/local/lib Also can you confirm you have all of the following files present? /usr/lib/security/pam_winbind.c /usr/lib/security/pam_winbind.h /usr/lib/security/pam_winbind.po /usr/lib/security/pam_winbind.so /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1 /usr/lib/libnss_winbind.so.2 /usr/lib/nss_winbind.so.1 /usr/lib/nss_winbind.so.2 cheers Andy. -----Original Message----- From: samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org [mailto:samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org]On Behalf Of Ganguly, Sapan Posted At: 29 January 2004 10:27 Posted To: Samba Conversation: [Samba] Back to 3.0.1, Winbind and Solaris 9 Subject: [Samba] Back to 3.0.1, Winbind and Solaris 9 I've gone back to 3.0.1 to try and get winbind to work with my Solaris 9 machine and NT4 domain. Everything works except user authentication. The wbinfo and getent commands do what they are supposed to. I've included a truss of 'su - ganguly' According to pamlog, the user 'ganguly' has been granted access but it is still hanging. How do I do a truss of a telnet login? I'm hoping some one out there is good with Solaris. Can you help? Thanks, Sapan BBCi at http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this. BBCi at http://www.bbc.co.uk/ This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this.
Reasonably Related Threads
- How do I get Winbind accounts in LDAP?
- winbind and Solaris 9 with AD
- troubles with telnet sessions under Solaris8 as AD member with winbind V3.0.23d
- Trying to join a Solaris 8 box to Windows 2000 AD.
- On Solaris8 install samba show error: libsendfile.so.1: open failed: No such file or directory