samba - Jan 2006 - Samba 3.0.21 +solaris 8 +xdm +pam +2003 AD

We have recently upgraded to :

samba-3.0.21
openssl-0.9.7g
krb5-1.4.3
openldap-2.3.11
db-4.4.16
cyrus-sasl-2.1.21
m4-1.4.4flex-2.5.31
autoconf-2.59
libiconv-1.9.1
gcc-3.4.2
bison-2.1
automake-1.9
libtool-1.5.22

and have got samba authenticating against our 2003 AD servers, however we now
discovered that someone has setup xdm to use pam authentication to the old NT4
domain using xdm.pam and pam_smb_auth.so.1

weve tried repointing the pam_smb.conf file to the new domain controllers and it
still wont authenticate is pam_smb still in use or is there a better way to do
this?

Thanks

Rich


This e-mail and any attachment is for authorised use by the intended
recipient(s) only. It may contain proprietary material, confidential information
and/or be subject to legal privilege. It should not be copied, disclosed to,
retained or used by, any other party. If you are not an intended recipient then
please promptly delete this e-mail and any attachment and all copies and inform
the sender. Thank you.

Hi Richard,

i think you'll have to move to pam_winbind as pam_smb is not aware of
SMB signing (which is normally switched on in W2k3 ADs).

Chris
 
> -----Original Message-----
> From: 
> samba-bounces+christian.masopust=siemens.com@lists.samba.org 
> [mailto:samba-bounces+christian.masopust=siemens.com@lists.sam
ba.org] On Behalf Of Batty, Richard
> Sent: Friday, January 27, 2006 4:10 PM
> To: Samba Mailing List (E-mail)
> Subject: [Samba] Samba 3.0.21 +solaris 8 +xdm +pam +2003 AD
> 
> 
> We have recently upgraded to :
> 
> samba-3.0.21
> openssl-0.9.7g
> krb5-1.4.3
> openldap-2.3.11
> db-4.4.16
> cyrus-sasl-2.1.21
> m4-1.4.4flex-2.5.31
> autoconf-2.59
> libiconv-1.9.1
> gcc-3.4.2
> bison-2.1
> automake-1.9
> libtool-1.5.22
> 
> and have got samba authenticating against our 2003 AD 
> servers, however we now discovered that someone has setup xdm 
> to use pam authentication to the old NT4 domain using xdm.pam 
> and pam_smb_auth.so.1
> 
> weve tried repointing the pam_smb.conf file to the new domain 
> controllers and it still wont authenticate is pam_smb still 
> in use or is there a better way to do this?
> 
> Thanks
> 
> Rich
> 
> 
> This e-mail and any attachment is for authorised use by the 
> intended recipient(s) only. It may contain proprietary 
> material, confidential information and/or be subject to legal 
> privilege. It should not be copied, disclosed to, retained or 
> used by, any other party. If you are not an intended 
> recipient then please promptly delete this e-mail and any 
> attachment and all copies and inform the sender. Thank you.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>