samba - Nov 2022 - Login From Domain

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.


On Mon, Nov 14, 2022 at 1:01 AM Michael Tokarev via samba <
samba at lists.samba.org> wrote:
> 14.11.2022 00:18, Rowland Penny via samba ?????:
> ..
> >> Don't I need to do something with a pam.d file?
> >
> > Such as ?
> > If this is Debian, then this is done for you.
>
> It is done if you install libpam-winbind package, and if
> you actually configured it.  The configuration utility is
> invoked after libpam-winbind installation automatically.
>
> I installed 'apt install libpam-winbind'.  It installed but the
configuration utility didn't run.  This is a fresh install of Debian 11.5.
I did go through a similar config when installing the OS but I'm not sure
if it was the same since that package wasn't actually installed.

> The PAM bits should be enabled in this case.
>
> /mjt
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

14.11.2022 19:52, Rob Campbell via samba wrote:
>> It is done if you install libpam-winbind package, and if
>> you actually configured it.  The configuration utility is
>> invoked after libpam-winbind installation automatically.
>>
> I installed 'apt install libpam-winbind'.  It installed but the
> configuration utility didn't run.  This is a fresh install of Debian
11.5.
> I did go through a similar config when installing the OS but I'm not
sure
> if it was the same since that package wasn't actually installed.
In the libpam-winbind postinst script there's a single command:

   pam-auth-update --package

It's been there for quite some time, it is definitely present in
the bullseye version.

Run it manually now (without the arguments), it will let you
to configure pam-winbind too.  Without this, auth wont work.

Besides, pam-winbind from Debian 11 can't be installed on a
system where you have samba bits from bullseye-backports, since
there will be a version conflict.  Or should be anyway - if
it is installable together with samba components of different
versions, it's a bug which I should fix.  Please give some
details here :)

Thanks!

/mjt