Matt Finlayson
2005-Nov-28 18:47 UTC
[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?
I am having trouble getting pam_smb_auth.so to work with the latest version of samba. It was working with the 2.* versions but when I tried to upgrade to Samba 3 authentication fails on the client. I do not know if I need to reconfigure samba to work with pam_smb_auth.so, I have tried man options. Please also refer to: http://lists.samba.org/archive/samba-technical/2005-November/043973.html I have using the stock RPM and compiling from source. I use the same approach for version 2 and 3 but 3 does not work. Please help. -- Matt Finlayson Information Technology Specialist School of Engineering and Computer Science Washington State University Vancouver 360-546-9481 It has been said, ?A day that is without troubles is not fulfilling. Rather, give me a day of troubles well handled so that I can be content with my achievements.?
Andrew Bartlett
2005-Nov-29 00:33 UTC
[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?
On Mon, 2005-11-28 at 10:46 -0800, Matt Finlayson wrote:> I am having trouble getting pam_smb_auth.so to work with the latest > version of samba. It was working with the 2.* versions but when I tried > to upgrade to Samba 3 authentication fails on the client. > > I do not know if I need to reconfigure samba to work with > pam_smb_auth.so, I have tried man options. Please also refer to:You mention that you are thinking of using pam_winbindd. I strongly suggest that option. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20051129/148f231b/attachment.bin
Matt Finlayson
2005-Dec-24 06:18 UTC
[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?
The work around That I have developed for this is diagramed as follows:
------------ ----------- -----------------------------------
| linux |<--->| samba 2 |<---->| Samba 3 user info, passwords
|
| clients | | Server | | Server File share |
------------ | authN | -----------------------------------
----------- ^
|
------------ |
| Windows |<---------------------------------/
| Clients |
------------
After countless configurations, rebuild and even OS reinstalls from
square one I got the above to work. Samba 2 server acts as a domain
member server and passes user auth to the samba 3 server.
I do not know how this relates but as I stated in previous posts, if I
try to authenticate linus directly against Samba 3 using Pam module the
following error shows in the samba log
[2005/11/17 14:21:53, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record
does not exist.
When I investigate user info with pdbedit I see the the NT username
value is blank. I have seen posting that state it is an unused value.
Maybe it is not related at all, but it makes me curious...
Thanks,
BTW, pam_winbindd is not an option.
--
Matt Finlayson
Information Technology Specialist
School of Engineering and Computer Science
Washington State University Vancouver
360-546-9481
It has been said, ?A day that is without troubles is not fulfilling.
Rather, give me a day of troubles well handled so that I can be content
with my achievements.?
Andrew Bartlett wrote:> On Mon, 2005-11-28 at 10:46 -0800, Matt Finlayson wrote:
>
>>I am having trouble getting pam_smb_auth.so to work with the latest
>>version of samba. It was working with the 2.* versions but when I tried
>>to upgrade to Samba 3 authentication fails on the client.
>>
>>I do not know if I need to reconfigure samba to work with
>>pam_smb_auth.so, I have tried man options. Please also refer to:
>
>
> You mention that you are thinking of using pam_winbindd. I strongly
> suggest that option.
>
> Andrew Bartlett
>