Hi ! Has anybody already managed to make pam_mount and winbind working together ? I'm running a linux 7.2 box with samba 2.2.4. I use winbind for user authentication from a win2k server (DEDALE in domain VALBONE). The following command works fine: $ smbmount //DEDALE/SHAREDIR \ /mnt/smb/dedale/sharedir/ -o \ credentials=/home/win2k/VALBONE/slautier/.smbpw,uid='VALBONE+slautier',gid='VALB ONE+Domain users',fmask=664,dmask=775 I've installed pam_mount (http://pam-mount.conectevil.com/) as I would like domain users to automatically mount their home dir (or anyone else) when they log into the linux box. I've updated the /etc/pam.d/login file: ----------------------------------------------------------------------- auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so>> auth required /lib/security/pam_mount.so use_firstpass#right location ? account sufficient /lib/security/pam_winbind.so account required /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth session required /lib/security/pam_stack.so service=system-auth session optional /lib/security/pam_console.so>> session optional /lib/security/pam_mount.so #right location? ----------------------------------------------------------------------- And created the followind /etc/pam_mount.conf file: ----------------------------------------------------------------------- ... debug 1 ... # Nothing changed ... # Volume volume VALBONE+slautier smb dedale sharedir /mnt/smb/dedale/sharedir - ... ----------------------------------------------------------------------- But when I log into the machine as VALBONE+slautier, the expected \\DEDALE\SHAREDIR volume is not mounted. I didn't find any error in the log files. Is there sthg wrong in my pam.d/login file ? Should pam_mount module line be located somewhere else ? I'm not a PAM expert but I've got the feeling that the pam_mount module is not in the right place. Elvis Pf?tzenreuter, the author of pam_mount, told me that he hasn't tested it yet as he's too busy. Any help would be greatly appreciated. Regards, Sabrina --------------------------------------------- Powered by Alinto (http://www.alinto.net) for lavache.com (http://www.lavacheautomatique.com)
G'day All I've gotten pam_mount to work, its great. Just a question though Can I use pam_mount with winbind, so winbind uses my samba server's username and password and pam_mount with mount the user directories. Also I am tring to compile pam_winbind.so with "make nsswitch/pam_winbind.so" but it is giving me the following error example nsswitch/pam_winbind.c:62: parse error before `*' nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:69: `pamh' undeclared (first use in this function) nsswitch/pam_winbind.c:69: (Each undeclared identifier is reported only once nsswitch/pam_winbind.c:69: for each function it appears in.) nsswitch/pam_winbind.c:69: `PAM_CONV' undeclared (first use in this function) nsswitch/pam_winbind.c:70: `PAM_SUCCESS' undeclared (first use in this function) nsswitch/pam_winbind.c:71: dereferencing pointer to incomplete type nsswitch/pam_winbind.c:71: `nargs' undeclared (first use in this function) nsswitch/pam_winbind.c:71: `message' undeclared (first use in this function) nsswitch/pam_winbind.c:72: `response' undeclared (first use in this function) nsswitch/pam_winbind.c:72: dereferencing pointer to incomplete type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:79: parse error before `*' nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:81: `PAM_SUCCESS' undeclared (first use in this function) nsswitch/pam_winbind.c:83: storage size of `msg' isn't known nsswitch/pam_winbind.c:87: `text' undeclared (first use in this function) nsswitch/pam_winbind.c:88: `type' undeclared (first use in this function) nsswitch/pam_winbind.c:91: `pamh' undeclared (first use in this function) Does any one know what causes this? Also (sorry) if someone else compiles the pam_winbind.so file am I able to use that file on my machine? Thanks
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 | Message: 10 | Reply-To: <cj@itonsite.com.au> | From: "cj" <cj@itonsite.com.au> | To: "Samba List (E-mail)" <samba@lists.samba.org> | Date: Tue, 10 Sep 2002 09:54:48 +1000 | Subject: [Samba] pam_mount and winbind | | G'day All | I've gotten pam_mount to work, its great. | Just a question though | | Can I use pam_mount with winbind, | so winbind uses my samba server's username and password and pam_mount with | mount the user directories. Yes, but only if you use 'winbind use default domain = yes' in your smb.conf. I would be interested in feedback on whether you managed to log in to KDE etc with your home directory on an smbfs mount .... | | Also | I am tring to compile pam_winbind.so with | "make nsswitch/pam_winbind.so" | but it is giving me the following error example | nsswitch/pam_winbind.c:62: parse error before `*' | nsswitch/pam_winbind.c: In function `converse': | nsswitch/pam_winbind.c:69: `pamh' undeclared (first use in this function) You are missing the pam headers, you should install the pam development package for your distribution (for example, pam-devel on Redhat and Mandrake). | Also (sorry) | if someone else compiles the pam_winbind.so file am I able to use that file | on my machine? Probably. Also, your distribution should ship it for you ... Buchan - -- |----------------Registered Linux User #182071-----------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE9fd28rJK6UGDSBKcRAlpbAJ9KQ8gBVN3jdhPR2/HXJ+RVc4e9lACgvmjo eKSJ1kJb2YsJkIyq7Eiwa6g=EOS+ -----END PGP SIGNATURE-----