samba - Jul 2003 - Is it sombody who has a working pam.conf for Solaris 9 ?

Hi,

I am trying to setup PAM for telnet on my solaris 9 box and the pam_winbind
grant me access but I recieve a acount failure:

Jul  4 13:29:59 clusterix1 pam_winbind[9688]: user 'patrikg' granted
acces
Jul  4 13:29:59 clusterix1 login[9688]: login account failure: Permission denied

The values in pam.conf for winbind is:

login   auth required   /usr/lib/security/pam_winbind.so
other   auth sufficient /usr/lib/security/pam_winbind.so
login   account sufficient      /usr/lib/security/pam_winbind.so
other   account sufficient      /usr/lib/security/pam_winbind.so
login   session sufficient      /usr/lib/security/pam_winbind.so

What have I missed ?

/Patrik
--
"In a world without fences who needs Gates"
Patrik Gustavsson, Senior Technical Consultant
patrik.gustavsson@sun.com     Telephone: +46 60 671540
http://glen.sweden            Mobile: +46 70 3551040
SUN MICROSYSTEMS              Fax: +46 60 671550
--------------------------------------------------------------

Hi,

I have now a working pam.conf for Solaris 9 with winbind for
telnet, rlogin, ftp, dtsession.

The following changes have been done compered to the default.

diff pam.conf.ORG pam.conf
21,23c21,24
< login auth required           pam_dhkeys.so.1
< login auth required           pam_unix_auth.so.1
< login auth required           pam_dial_auth.so.1
---
 > login auth sufficient         pam_dhkeys.so.1
 > login auth sufficient         pam_unix_auth.so.1
 > login auth sufficient         pam_dial_auth.so.1
 > login auth sufficient         /usr/lib/security/pam_winbind.so.1 
try_first_pass
29,30c30,32
< rlogin        auth required           pam_dhkeys.so.1
< rlogin        auth required           pam_unix_auth.so.1
---
 > rlogin        auth sufficient         pam_dhkeys.so.1
 > rlogin        auth sufficient         pam_unix_auth.so.1
 > rlogin        auth sufficient         
/usr/lib/security/pam_winbind.so.1 try_first_pass
49,50c51,53
< other auth required           pam_dhkeys.so.1
< other auth required           pam_unix_auth.so.1
---
 > other auth sufficient         pam_dhkeys.so.1
 > other auth sufficient         pam_unix_auth.so.1
 > other auth sufficient         /usr/lib/security/pam_winbind.so.1 
try_first_pass
65,66c68,70
< other account required        pam_projects.so.1
< other account required        pam_unix_account.so.1
---
 > other account sufficient      pam_projects.so.1
 > other account sufficient      pam_unix_account.so.1
 > other account sufficient      /usr/lib/security/pam_winbind.so.1
71a76
 > other session sufficient      /usr/lib/security/pam_winbind.so.1

/Patrik

Patrik Gustavsson PS Sweden Senior Technical Consultant wrote:
> Hi,
>
> I am trying to setup PAM for telnet on my solaris 9 box and the 
> pam_winbind
> grant me access but I recieve a acount failure:
>
> Jul  4 13:29:59 clusterix1 pam_winbind[9688]: user 'patrikg'
granted
> acces
> Jul  4 13:29:59 clusterix1 login[9688]: login account failure: 
> Permission denied
>
> The values in pam.conf for winbind is:
>
> login   auth required   /usr/lib/security/pam_winbind.so
> other   auth sufficient /usr/lib/security/pam_winbind.so
> login   account sufficient      /usr/lib/security/pam_winbind.so
> other   account sufficient      /usr/lib/security/pam_winbind.so
> login   session sufficient      /usr/lib/security/pam_winbind.so
>
> What have I missed ?
>
> /Patrik
> -- 
> "In a world without fences who needs Gates"
> Patrik Gustavsson, Senior Technical Consultant
> patrik.gustavsson@sun.com     Telephone: +46 60 671540
> http://glen.sweden            Mobile: +46 70 3551040
> SUN MICROSYSTEMS              Fax: +46 60 671550
> --------------------------------------------------------------
>
>
-- 
"In a world without fences who needs Gates"
Patrik Gustavsson, Senior Technical Consultant
patrik.gustavsson@sun.com     Telephone: +46 60 671540
http://glen.sweden            Mobile: +46 70 3551040
SUN MICROSYSTEMS              Fax: +46 60 671550
--------------------------------------------------------------