Kandukuru_Suresh at emc.com
2010-Jul-03 10:29 UTC
[Samba] pam_smbpass.so passdb.tdb support
Hi, Recently I have installed samba 3.4.8 on my device. Since then ftp (vsftp,proftpd) which is taking users from samba database with pam_smbpass.so is not working. After enabling detailed log I have noticed it is looking for the passwords in smbpasswd (/etc/samba/private) which is of zero size . I think all users passwd are located in passwd.tdb.I could fix this by giving "passdb backend=smbpasswd" . somewhere I read smbpasswd is obsolete , and recommended to use tdbsam .. and /etc/pam.d/ftp file is --------------------- root at storage:/# cat /etc/pam.d/ftp auth required /lib/security/pam_smbpass.so account required /lib/security/pam_nologin.so account required /lib/security/pam_smbpass.so password required /lib/security/pam_smbpass.so session required /lib/security/pam_unix.so ------------------- How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please tell me I have been trying for last 2 days. Did not find anything. Thanks Suresh
You need to first make sure that samba is working correctly before trouble shooting the ftp component. Are you using samba for windows clients? The "testparm -v" should show your current configuration, including which is the password backend. I do not see any reason to change to the older "smbpasswd" format. To verify that the user accounts to exist: The "pdbedit -Lv" command will list the existing accounts. You can also use the "tdbdump" command to look at the contents of a tdb file. To verify that the passwords are valid: You can try logging into samba with the "sambaclient" command from linux - that will let you know if your password is correct. You can also use the "net use \\yourserver " command from windows to verify your password -----Original Message----- From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Kandukuru_Suresh at emc.com Sent: Saturday, July 03, 2010 6:30 AM To: samba at lists.samba.org Subject: [Samba] pam_smbpass.so passdb.tdb support Hi, Recently I have installed samba 3.4.8 on my device. Since then ftp (vsftp,proftpd) which is taking users from samba database with pam_smbpass.so is not working. After enabling detailed log I have noticed it is looking for the passwords in smbpasswd (/etc/samba/private) which is of zero size . I think all users passwd are located in passwd.tdb.I could fix this by giving "passdb backend=smbpasswd" . somewhere I read smbpasswd is obsolete , and recommended to use tdbsam .. and /etc/pam.d/ftp file is --------------------- root at storage:/# cat /etc/pam.d/ftp auth required /lib/security/pam_smbpass.so account required /lib/security/pam_nologin.so account required /lib/security/pam_smbpass.so password required /lib/security/pam_smbpass.so session required /lib/security/pam_unix.so ------------------- How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please tell me I have been trying for last 2 days. Did not find anything. Thanks Suresh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
On 07/03/2010 05:29 AM, Kandukuru_Suresh at emc.com wrote:> Hi, > > Recently I have installed samba 3.4.8 on my device. Since then ftp > (vsftp,proftpd) which is taking users from samba database with > pam_smbpass.so is not working. After enabling detailed log I have > noticed it is looking for the passwords in smbpasswd > (/etc/samba/private) which is of zero size . I think all users passwd > are located in passwd.tdb.I could fix this by giving "passdb > backend=smbpasswd" . > > > > somewhere I read smbpasswd is obsolete , and recommended to use tdbsam > .. > > > > and /etc/pam.d/ftp file is > --------------------- > root at storage:/# cat /etc/pam.d/ftp > auth required /lib/security/pam_smbpass.so > account required /lib/security/pam_nologin.so > account required /lib/security/pam_smbpass.so > password required /lib/security/pam_smbpass.so > session required /lib/security/pam_unix.so > > ------------------- > > > > How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please > tell me I have been trying for last 2 days. Did not find anything.You can not do that without changing the pam_smbpasswd code. This module specifically operates against the smbpasswd file. -John T.