search for: ccred

I'm revising some docs, and i've returned on the 'offline logon' tema. Looking at: https://wiki.samba.org/index.php/PAM_Offline_Authentication and smb.conf manpage, it is clear that 'offline logon' is a pam/authentication only, does not involve NSS. Considering a 'full offline' DM client (supposing a portable), there's a 'winbind permanent nss

Hai Marco, But a quick peek at this tells me it should be possible and you need these packages for a "full offline setup" or, a combination of these. These packages need to be installed and all need to be configured: libnss-ldapd libpam-ldapd nscd libpam-ccreds libpam-mklocaluser libnss-winbind libpam-winbind I suggest first look at : https://packages.debian.org/buster/libpam-mklocaluser that might help. I think, if you check these all out, you get it working, but its a combination of the above packages. Your smart enough for that. ;-) Sorry i dont...

...success=5 default=ignore]      pam_krb5.so minimum_uid=1000 auth    [success=4 default=ignore]      pam_unix.so nullok_secure try_first_pass auth    [success=3 default=ignore]      pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass auth    [success=2 default=ignore]      pam_ccreds.so minimum_uid=1000 action=validate use_first_pass auth    [default=ignore]                pam_ccreds.so minimum_uid=1000 action=update auth    requisite                       pam_deny.so auth    required                        pam_permit.so auth    optional                        pam_ccreds.so mi...

On Thu, 27 Aug 2015 23:03:39 -0400 Robert Moskowitz <rgm at htt-consult.com> wrote: > > On 08/27/2015 08:45 PM, Jim Seymour wrote: > > On Thu, 27 Aug 2015 17:00:28 -0400 > > Robert Moskowitz <rgm at htt-consult.com> wrote: > > > >> Ah, LDAP is included within Samba, I find. Don't install provided > >> one... [snip] > > >