hi'
Ive followed the steps from http://weblog.bignerdranch.com/?p=6
<http://weblog.bignerdranch.com/?p=6&page=2> &page=2 and
http://forums.fedoraforum.org/showthread.php?t=92804
I'm trying to login as a domain user in x (gdm)
If a boot the pc and try to login i get the following error in
/var/log/messages:
Jan 9 13:10:35 zgltsp03 gdm(pam_unix)[2812]: check pass; user unknown
Jan 9 13:10:35 zgltsp03 gdm(pam_unix)[2812]: authentication failure;
logname= u
id=0 euid=0 tty=ws001.domain.lan:0 ruser= rhost=ws001.domain.lan
Jan 9 13:10:35 zgltsp03 pam_winbind[2812]: user 'domain+daniel' granted
access
Jan 9 13:10:35 zgltsp03 gdm(pam_unix)[2812]: could not identify user (from
getpwnam(domain+daniel))
Jan 9 13:10:35 zgltsp03 gdm-binary[2812]: Couldn't set acct. mgmt for
domain+daniel
now if i call in a shell de command "wbinfo -u -g" and then try to
login
everything works fine!
almost as if the wbinfo would remind the server that those users could
login..
after a few minutes (2 or 3) i try to login again with the same user and it
doesnt work again!!
this line is quite strange, no? .... could not identify user (from
getpwnam(domain+daniel))
my krb5 file:
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = domain.LAN
# default_tgs_enctypes = des-cbc-crc des-cbc-md5
# default_tkt_enctypes = des-cbc-crc des-cbc-md5
forwardable = true
proxiable = true
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
domain.LAN = {
kdc = 10.0.0.100:88
# admin_server = 10.0.0.100:749
default_domain = domain.lan
}
[domain_realm]
.domain.lan = DOMAIN.LAN
domain.lan = DOMAIN.LAN
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
and my smb.conf file:
[global]
workgroup = DOMAIN
netbios name = SERVIDORES
server string = LTSP Server
winbind separator = +
dns proxy = no
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
winbind enum users = yes
winbind enum groups = yes
template shell = /bin/bash
winbind use default domain = no
# username map = /etc/samba/smbusers
security = ads
encrypt passwords = yes
realm = DOMAIN.LAN
password server = controller.domain.lan
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = no
domain master = False
preferred master = False
printcap name = /etc/printcap
load printers = yes
proxy = no
PS: i replaced the real domain name with "domain"
many thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20070109/85c3c609/attachment-0001.html>
