Lewis Shobbrook
2003-Dec-17 03:29 UTC
[Samba] NT4 & DOS Users rejected by PAM through winbind.
Hi All, I have a member server on debian unstable using 3.0.0.final, member of 2000 AD, in ADS security mode & authenticating through winbind. XP/2000/2003 clients connect to shares OK, NT4 & DOS fail (suspect 9x the same not tested). NOT using NTLM v2. The logged error is "auth/pampass.c:smb_pam_accountcheck(781) smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User DOMAIN+user. winbind log generates No rid for Pre-Windows 2000 Compatible Access !? I can't find any info on this error out there. Any ideas where to start? Xmas Cheers, Lewis Shobbrook
Gerald (Jerry) Carter
2003-Dec-17 06:32 UTC
[Samba] NT4 & DOS Users rejected by PAM through winbind.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Lewis Shobbrook wrote: | Hi All, | | I have a member server on debian unstable using 3.0.0.final, member of | 2000 AD, in ADS security mode & authenticating through winbind. | XP/2000/2003 clients connect to shares OK, NT4 & DOS fail (suspect 9x | the same not tested). NOT using NTLM v2. | The logged error is "auth/pampass.c:smb_pam_accountcheck(781) | smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User | DOMAIN+user. | | winbind log generates No rid for Pre-Windows 2000 Compatible Access !? | | I can't find any info on this error out there. Log a bug for me please. And I'll nee a full level 10 debug log from winbindd. I think I know what's breaking here but I'll have to see the logs to be sure. Should be easy to fix. ciao, jerry ~ ---------------------------------------------------------------------- ~ Hewlett-Packard ------------------------- http://www.hp.com ~ SAMBA Team ---------------------- http://www.samba.org ~ GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/3/jiIR7qMdg1EfYRAo4pAKCrmCyT0/X/SWcdswzHzHoKiGEj1ACguMqV usp2eGc64nNcftIO6oP9x+0=n7WT -----END PGP SIGNATURE-----