samba - Oct 2002 - winbind /etc/pam.d/system-auth

Hi,

I have setup /etc/pam.d/system-auth as below. But when I login to the Linux
Box from KDE3, I get a prompt saying I don't have write access to the HOME.
Then got kicked out. In NT Domain, when I double click on the Samba machine,
I get network path not found. What am I doing wrong? Please help.

Regards,
Norman

#%PAM-1.0
auth required   /lib/security/pam_env.so
auth sufficient /lib/security/pam_winbind.so
auth sufficient /lib/security/pam_unix.so likeauth nullok
auth required   /lib/security/pam_deny.so

account sufficient /lib/security/pam_winbind.so
account required   /lib/security/pam_unix.so
password required  /lib/security/pam_cracklib.so retry=3 minlen=2 dcredit=0
ucredit=0

password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow
password required   /lib/security/pam_deny.so

session required /lib/security/pam_mkhomedir.so skel=/etc/skel umask=0022
session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so

> Message: 8
> Reply-To: "Norman Zhang" <nzhang@arkon.bc.ca>
> From: "Norman Zhang" <nzhang@arkon-group.com>
> To: <samba@lists.samba.org>
> Date: Thu, 10 Oct 2002 18:44:51 -0700
> Subject: [Samba] winbind /etc/pam.d/system-auth
> 
> Hi,
> 
> I have setup /etc/pam.d/system-auth as below. But when I login to the Linux
> Box from KDE3, I get a prompt saying I don't have write access to the
HOME.
pam_mkhomedir doesn't make deep directories, so you need to make the 
parent directory of your user's homes. So if you use 'template homedir =
/home/%D/%u', then you need to make /home/%D where %D is each domain you 
are supporting.
> Then got kicked out. In NT Domain, when I double click on the Samba
machine,
> I get network path not found. What am I doing wrong? Please help.
> 
If you still get this with samba when connecting to it, and the home 
directory didn't exist before, you need to add the option 'obey pam 
restrictions = yes' to the global section of your smb.conf.

Regards,
Buchan

-- 
|----------------Registered Linux User #182071-----------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7