samba - Jan 2005 - pam auth with mysql

hi list,


since, days i?m trying to auth. samba users with pam using mysql
without any result
this is my /etc/pam.d/samba:

#@include common-auth
#@include common-account
#@include common-session
auth     required    pam_mysql.so   user=root passwd=** db=samba table=users
usercolumn=login passwdcolumn=password crypt=1
account  required    pam_mysql.so   user=root passwd=**  db=samba table=users
usercolumn=login passwdcolumn=password crypt=1
password required    pam_mysql.so   user=root passwd=**  db=samba table=users
usercolumn=login passwdcolumn=password crypt=1
session  required    pam_mysql.so   user=root passwd=**  db=samba table=users
usercolumn=login passwdcolumn=password crypt=1

i see that pam is doing the right mysq_query
"SELECT password FROM users WHERE login='root'" 
but  i alwas getting a an error:
session setup failed: NT_STATUS_LOGON_FAILURE

without the mysql_auth in pam samba is working fine.

isn?t a solution for this?

thx
luke

Hi,

On Sat, Jan 15, 2005 at 12:06:05PM +0100, Lukas Pataki wrote about '[Samba]
pam auth with mysql':
> #@include common-auth
> #@include common-account
> #@include common-session
> auth     required    pam_mysql.so   user=root passwd=** db=samba
table=users usercolumn=login passwdcolumn=password crypt=1
> account  required    pam_mysql.so   user=root passwd=**  db=samba
table=users usercolumn=login passwdcolumn=password crypt=1
> password required    pam_mysql.so   user=root passwd=**  db=samba
table=users usercolumn=login passwdcolumn=password crypt=1
> session  required    pam_mysql.so   user=root passwd=**  db=samba
table=users usercolumn=login passwdcolumn=password crypt=1
> i see that pam is doing the right mysq_query
> "SELECT password FROM users WHERE login='root'" 
> but  i alwas getting a an error:
> session setup failed: NT_STATUS_LOGON_FAILURE
> without the mysql_auth in pam samba is working fine.
> isn?t a solution for this?
PAM will not work for password validation when "encrypt passwords
yes". You will have to use either a custom module in Samba (pdb_mysql)
or switch to storing your user info somewhere different (such as 
in LDAP).

Cheers,

Jelmer

-- 
Jelmer Vernooij <jelmer@samba.org> - http://jelmer.vernstok.nl/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url :
http://lists.samba.org/archive/samba/attachments/20050115/3dca2350/attachment.bin