samba - Mar 2011 - Upgraded to 3.5.8 local users unable to log in AD users can

Hi all,

Upgraded Samba on RHEL5 from 3.0.33 to 3.5.8 from an rpm. Have an issue where AD
users can connect to the linux box but local unix accounts cannot.

We are using PAM not kerberos.

After much looking and trail and error. I commented out this line in the
/etc/pam.d/system-auth file and it works. Why???

account     required      pam_unix.so broken_shadow
account     sufficient    pam_succeed_if.so uid < 500 quiet
#account     [default=bad success=ok user_unknown=ignore] pam_winbind.so
account     required      pam_permit.so


I'm not really ofay with how the whole authentication works.

Thanks!!

You system was trying to authenticate with winbind!?
Did Winbind run is your smb.conf configuration to interact with winbind?

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------

-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
Im
Auftrag von Alfanoid
Gesendet: Dienstag, 15. M?rz 2011 01:39
An: samba at lists.samba.org
Betreff: [Samba] Upgraded to 3.5.8 local users unable to log in AD users can

Hi all,

Upgraded Samba on RHEL5 from 3.0.33 to 3.5.8 from an rpm. Have an issue
where AD
users can connect to the linux box but local unix accounts cannot.

We are using PAM not kerberos.

After much looking and trail and error. I commented out this line in the
/etc/pam.d/system-auth file and it works. Why???

account     required      pam_unix.so broken_shadow
account     sufficient    pam_succeed_if.so uid < 500 quiet
#account     [default=bad success=ok user_unknown=ignore] pam_winbind.so
account     required      pam_permit.so


I'm not really ofay with how the whole authentication works.

Thanks!!


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba