search for: winbind_pam_auth_crap

Hi Rowland, I tried both pam winbind & also samba with fix for CVE-2018-1139. But still cannot get windows 2016 "protected users" to work with samba. Note that "wbinfo --krb5auth" manages to authenticate. This I see it uses WINBIND_PAM_AUTH & not WINBIND_PAM_AUTH_CRAP. I dont see how to switch to WINBIND_PAM_AUTH instead of AUTH_CRAP. Any further insights? Thanks! --Shyam On Tue, 14 Aug 2018 19:18:42 +0530 Shyam Kaushik <shyam at zadarastorage.com> wrote: > Thanks Rowland for your pointers! > > I'm sorry to just mention it as win2k. This is...

...Valgrind 13) Updates to stop spurious error message in tdb 14) Fix silly logic bug in 'make smbd processes' and 'status = no' check 15) Fix compilation of pam_smbpass and --with-ldap 16) Fix compilation of samwrapper on Solaris hosts 17) fix logic error in a check for enableing the winbind_pam_auth_crap() code & fix formatting typo in --with-winbind-auth-challenge 18) Correcting check for ldap_start_tls() 19) Fixed a problem with getgroups() where it could include our current effective gid

Hi Folks, We have samba(4.8) deployed with following key parms security = ADS realm = TEST client NTLMv2 auth = No ntlm auth = disabled We have a win2k user configured as a "Protected User" (https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/how -to-configure-protected-accounts) When this user tries to connect to samba/winbind, we get

...rind 13) Updates to stop spurious error message in tdb 14) Fix silly logic bug in 'make smbd processes' and 'status = no' check 15) Fix compilation of pam_smbpass and --with-ldap 16) Fix compilation of samwrapper on Solaris hosts 17) fix logic error in a check for enableing the winbind_pam_auth_crap() code & fix formatting typo in --with-winbind-auth-challenge 18) Correcting check for ldap_start_tls() 19) Fixed a problem with getgroups() where it could include our current effective gid