samba - Jun 2003 - Making winbindd and pam_mount play nice together

Did you join the box to the domain
Did you set security to be domain and passwword to encrypted?
Is the AD server in mixed mode?
Are you configuring the "right" pam module for the login as per the
FAQ?
Is wbinfo returning the users and groups? 

jim 

 

Date: Mon, 2 Jun 2003 11:07:04 +1000
From: "John Simovic" <jsimovic@rydesc-h.schools.nsw.edu.au>
Subject: RE: [Samba] Making winbindd and pam_mount play nice together
	(2ndtry)
To: "Andrew Bartlett" <abartlet@samba.org>
Cc: samba@lists.samba.org
Message-ID:
	<CB5DFC3826CDAA48A8FA15A9E83D47131CEBB8@mail.rydesc-h.schools.nsw.edu.au>
	
Content-Type: text/plain; charset="windows-1252" 

I have winbind working except it will not let me authenticate users against 
the
Active Directory. Thsi leads me to the conclusion that my PAM files are not
right. I have posted then here. PLease help me!

I've gotten winbind and pam_mount to play nice, only to run into a bug in
glibc that hangs the smbmount...

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=82820
>From the author of pam_mount:
>I did find some behavior in pam_mount that was non-conducive to local
>accounts.  
>That is now fixed in pam_mount 0.9.2, available at http://www.flyn.org.  Go
>get it.
>
>More importantly, service configuration files in /etc/pam.d must be
>configured in a special way to support mixed local and non-local accounts.
>After you get the new pam_mount. Model your configuration files after this:
.
auth	required	/lib/security/pam_mount.so
auth	sufficient	/lib/security/pam_winbind.so	use_first_pass
auth	required	/lib/security/pam_unix.so	use_first_pass

I also added:
session   optional /lib/security/pam_mount.so use_first_pass
.

-----Original Message-----
From: jim feldman [mailto:jmf@jim-liesl.org] 
Sent: Monday, June 02, 2003 9:59 PM
To: samba list
Subject: RE: [Samba] Making winbindd and pam_mount play nice together

Did you join the box to the domain
Did you set security to be domain and passwword to encrypted?
Is the AD server in mixed mode?
Are you configuring the "right" pam module for the login as per the
FAQ?
Is wbinfo returning the users and groups? 

jim 

 

Date: Mon, 2 Jun 2003 11:07:04 +1000
From: "John Simovic" <jsimovic@rydesc-h.schools.nsw.edu.au>
Subject: RE: [Samba] Making winbindd and pam_mount play nice together
	(2ndtry)
To: "Andrew Bartlett" <abartlet@samba.org>
Cc: samba@lists.samba.org
Message-ID:
	
<CB5DFC3826CDAA48A8FA15A9E83D47131CEBB8@mail.rydesc-h.schools.nsw.edu.au>
	
Content-Type: text/plain; charset="windows-1252" 

I have winbind working except it will not let me authenticate users against 
the
Active Directory. Thsi leads me to the conclusion that my PAM files are not
right. I have posted then here. PLease help me! 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba