Matt Finlayson
2005-Nov-28 18:47 UTC
[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?
I am having trouble getting pam_smb_auth.so to work with the latest version of samba. It was working with the 2.* versions but when I tried to upgrade to Samba 3 authentication fails on the client. I do not know if I need to reconfigure samba to work with pam_smb_auth.so, I have tried man options. Please also refer to: http://lists.samba.org/archive/samba-technical/2005-November/043973.html I have using the stock RPM and compiling from source. I use the same approach for version 2 and 3 but 3 does not work. Please help. -- Matt Finlayson Information Technology Specialist School of Engineering and Computer Science Washington State University Vancouver 360-546-9481 It has been said, ?A day that is without troubles is not fulfilling. Rather, give me a day of troubles well handled so that I can be content with my achievements.?
Andrew Bartlett
2005-Nov-29 00:33 UTC
[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?
On Mon, 2005-11-28 at 10:46 -0800, Matt Finlayson wrote:> I am having trouble getting pam_smb_auth.so to work with the latest > version of samba. It was working with the 2.* versions but when I tried > to upgrade to Samba 3 authentication fails on the client. > > I do not know if I need to reconfigure samba to work with > pam_smb_auth.so, I have tried man options. Please also refer to:You mention that you are thinking of using pam_winbindd. I strongly suggest that option. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20051129/148f231b/attachment.bin
Matt Finlayson
2005-Dec-24 06:18 UTC
[Samba] pam_smb_auth.so support in version 3 or pam_winbind.so?
The work around That I have developed for this is diagramed as follows: ------------ ----------- ----------------------------------- | linux |<--->| samba 2 |<---->| Samba 3 user info, passwords | | clients | | Server | | Server File share | ------------ | authN | ----------------------------------- ----------- ^ | ------------ | | Windows |<---------------------------------/ | Clients | ------------ After countless configurations, rebuild and even OS reinstalls from square one I got the above to work. Samba 2 server acts as a domain member server and passes user auth to the samba 3 server. I do not know how this relates but as I stated in previous posts, if I try to authenticate linus directly against Samba 3 using Pam module the following error shows in the samba log [2005/11/17 14:21:53, 3] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. When I investigate user info with pdbedit I see the the NT username value is blank. I have seen posting that state it is an unused value. Maybe it is not related at all, but it makes me curious... Thanks, BTW, pam_winbindd is not an option. -- Matt Finlayson Information Technology Specialist School of Engineering and Computer Science Washington State University Vancouver 360-546-9481 It has been said, ?A day that is without troubles is not fulfilling. Rather, give me a day of troubles well handled so that I can be content with my achievements.? Andrew Bartlett wrote:> On Mon, 2005-11-28 at 10:46 -0800, Matt Finlayson wrote: > >>I am having trouble getting pam_smb_auth.so to work with the latest >>version of samba. It was working with the 2.* versions but when I tried >>to upgrade to Samba 3 authentication fails on the client. >> >>I do not know if I need to reconfigure samba to work with >>pam_smb_auth.so, I have tried man options. Please also refer to: > > > You mention that you are thinking of using pam_winbindd. I strongly > suggest that option. > > Andrew Bartlett >