search for: pam_exec

I figure some one here may find this interesting. I just begun work on allowing a smb home directory to be automounted upon login. -------------- next part -------------- A non-text attachment was scrubbed... Name: pam_exec.c.diff Type: text/x-patch Size: 213 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20070519/19e6bd01/pam_exec.c.bin

I am absolutely loathe to necro a thread like this so far in the future but that's kind of the point here... It's 2019 and as much as I've tried (everything in this thread and more... like trying some weird trickery with pam_exec), I can't figure this out. I have clients with huge and elaborate OD environments that I absolutely would never have access to the terminal/desktop of, much less the schema of. This precludes a lot of the methods of getting around this which usually involves some kind of access to the OD Serve...

On my ubuntu machines I added auth required pam_exec.so /scripts/password_expire.sh to the beginning of /etc/pam.d/common-auth it looks pretty similar to what I did below. In the /etc/bash.bashrc I added a check to wait for the file to be less than 1 second old before looking at it. break out after 5 seconds in case something failed or is taking lo...

Does anyone have thoughts on how to kick off an e-mail on SSH login? -Jason

I have Fedora Core 1 workstations configured with winbind logging onto our NT domain. Everything is going well except that I cannot seem to figure out how to connect to a windows home directory on a Win2000 server. Here is the scenario: W2K server with home directories for each user: Each user has modify permissions to their share Administrator has full control First off, I need to somehow

Hi, We've a Samba server as purely fileserver in AD windows enviroment with a 2k3 server as bdc. Our goal is implement quote to manage disk space usage on samba server. Is it supported by samba ?! if not, which is the best way to approach it ? I did a little search on google but I've not found a clear way or documentation about it, so any advice is really appreciated. thx in advance,

Here's a simple patch which retrieves authorized_keys via exec'ing a program, rather than reading a flat file. I added a simple option, AuthorizedKeysExec, to sshd_config which simply executes the respective file, passing the username as argv[1]. Keys are returned via stdout. Notes: If AuthorizedKeysExec is set and an authorized_keys file exists, checking the existing authorized_keys

On Tue, Jul 12, 2016 at 02:10:41AM +0200, Xen wrote: > I want to ask what is the most common approach, and most functional > smallest-subset-technology approach to achieving the following. > > > - a samba server is using different users for its clients and these > users are general unix users, owning files and whatnot on the fs. > > - a linux system as client now wants

...hosen. So I have no clue how to actually export local users, but it is not that necessary (and gives its own problems, I guess). The only downside is that I have to manually duplicate users and groups, but I guess that's pretty manageable given the size of my system ;-). And when I can get pam_exec and pam_group installed, maybe more is possible.

Winner this worked wonderfully On Fri, Feb 3, 2017 at 8:51 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 3 Feb 2017 07:44:39 -0700 > Jeff Sadowski via samba <samba at lists.samba.org> wrote: > > > This seems to work for maxPwdAge > > > > ldapsearch -LLL -Q -s base -h ad.mydomain.tld -b > > dc=ad,dc=mydomain,dc=tld maxPwdAge

Am 2018-06-15 um 15:16 schrieb Stefan G. Weichinger via samba: > Am 2018-06-15 um 14:44 schrieb Stefan G. Weichinger via samba: > >> on my way now ... glibc new, samba-4.5.16 for a start >> >> we now get: >> >> [2018/06/15 14:43:09.481113, 0] >> ../source3/winbindd/winbindd_group.c:45(fill_grent) >> Failed to find domain 'Unix Group'.

...ays fi fi done On Fri, Feb 3, 2017 at 12:53 PM, Rowland Penny <rpenny at samba.org> wrote: > On Fri, 3 Feb 2017 12:39:20 -0700 > Jeff Sadowski via samba <samba at lists.samba.org> wrote: > > > On my ubuntu machines I added > > > > auth required pam_exec.so /scripts/password_expire.sh > > > > to the beginning of /etc/pam.d/common-auth > > > > That's where I was going wrong, I added it to common-session, but this > being Unix, I have found another way ;-) > > On Mate (so should work on gnome as well), create a .d...

Hi, Let me try to re-formulate, please tell me if I'm wrong. You have a bunch of users declared locally in /etc/passwd or something like that on one system. Now you would like to have another system using this users list with Samba. You also want these users to be valid only as long as the share exist. You don't want these users to be able to connect on system(s). If I'm right,

Thank for your answer: But i dont know understand why is following not working: I want to restrict the ssh access for a special domain member: In my "sshd_config" i added: AllowGroups restrictaccess root With user2 im able to login via ssh! log: pam_krb5(sshd:auth): user user2 authenticated as user2 at ROOTRUDI.DE With user1 im not! log: User user1 from 192.168.0.100 not allowed

..." flags since my user is neither owner nor in the main group, and my local permissions become: -------rw- 1 1031 65538 21 jul 12 21:16 hoho Of course this means every user on my system will have write access unless I block access to the directory. The server doesn't have pam_group and pam_exec so I may need to compile both. There is no way for me to add local users to the LDAP groups. Then order to have those permissions I need to create an equivalent LDAP user and log into samba using that. However when I do so it gives preference to the local user and disregards the LDAP suffix....

...th the NT4 style PDC, this then lead to AD. You do not need to have windows computers to use AD, you can use it with Unix computers and it will give you just one place of administration, you just need to set Samba up correctly, for this, see the Samba wiki. Rowland > > And when I can get pam_exec and pam_group installed, maybe more is > possible. > > > > > > > > >

Actually is there a way to show it more like a timestamp. It is hard to compute days left with a date format like that. I guess I could use date to do the conversion but I was wondering if there is a cleaner way On Fri, Feb 3, 2017 at 8:51 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 3 Feb 2017 07:44:39 -0700 > Jeff Sadowski via samba <samba at

...er owner nor in the > main group, and my local permissions become: > > -------rw- 1 1031 65538 21 jul 12 21:16 hoho > > Of course this means every user on my system will have write access unless > I block access to the directory. > > The server doesn't have pam_group and pam_exec so I may need to compile > both. > > There is no way for me to add local users to the LDAP groups. > > Then order to have those permissions I need to create an equivalent LDAP > user and log into samba using that. > > However when I do so it gives preference to the local use...

https://bugzilla.mindrot.org/show_bug.cgi?id=2408 Bug ID: 2408 Summary: Expose authentication information to PAM Product: Portable OpenSSH Version: -current Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: PAM support Assignee:

Howdy list, Sorry if this is a frequently discussed topic, or an off-topic question, but I couldn't find much info about my question by performing quick searches in the archives, and my question is pretty tightly related to security... Background: =========== I have a number of FreeBSD machines. Most are 4.x, but a few are 5.x (mainly the testing/devel machines). I also have a single Red